AWS SAA-C02:知识体系+401题解析

1
2
3
4
5
6
7
8
9

{
    "Version": "2012-10-17",
    "Statement": {
        "Effect": "Allow",
        "Action": [ "A list of the permissions the role is allowed to use" ],
        "Resource": [ "A list of the resources the role is allowed to access" ]
    }
}   
12345678

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "dynamodb:*",
      "Resource": "arn:aws:dynamodb:AWS-REGION-IDENTIFIER:ACCOUNT-ID-WITHOUT-HYPHENS:table/${aws:username}"
    }
  ]
}
12345678910

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

{
    "Version": "2012-10-17",
    "Statement": {
        "Sid": "AllowRemoveMfaOnlyIfRecentMfa",
        "Effect": "Allow",
        "Action": [
            "iam:DeactivateMFADevice",
            "iam:DeleteVirtualMFADevice"
        ],
        "Resource": "arn:aws:iam::*:user/${aws:username}",
        "Condition": {
            "NumericLessThanEquals": {"aws:MultiFactorAuthAge": "3600"}
        }
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A solutions architect is designing a new service behind Amazon API Gateway.
The request patterns for the service will be unpredictable and can change suddenly from 0
requests to over 500 per second.
The total size of the data that needs to be persisted in a backend database is currently less than
1 GB with unpredictable future growth Data can be queried using simple key-value requests.
Which combination of AWS services would meet these requirements? (Select TWO )
前需要保留在后端数据库中的数据总大小小于
1 GB，未来增长不可预测。可以使用简单的键值请求查询数据。
哪种AWS服务组合可以满足这些要求？ （选择两个）
A. AWS Fargate
B. AWS Lambda
C. Amazon DynamoDB
D. Amazon EC2 Auto Scaling
E. MySQL-compatible Amazon Aurora
bc

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A solutions architect needs to design a managed storage solution for a company's application
that includes high-performance machine learning,
This application runs on AWS Fargate and the connected storage needs to have concurrent
access to files and deliver high performance.
Which storage option should the solutions architect recommend?
解决方案架构师需要为公司的应用程序设计一个托管存储解决方案，其中包括高性能的机器学习。该应用程序在AWS Fargate上运行，并且连接的存储需要并发访问文件并提供高性能。解决方案架构师应建议哪种存储选项？
A. Create an Amazon S3 bucket for the application and establish an IAM role for Fargate to
communicate with Amazon S3.
B. Create an Amazon FSx for Lustre file share and establish an IAM role that allows Fargate to
communicate with FSx for Lustre.
. Create an Amazon Elastic File System (Amazon EFS) file share and establish an IAM role that
allows Fargate to communicate with Amazon EFS.
D. Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an
IAM role that allows Fargate to communicate with Amazon EBS.
Answer: B
A.为应用程序创建一个Amazon S3存储桶，并为Fargate建立一个IAM角色，以 与Amazon S3通信。 B.为Luster文件共享创建Amazon FSx，并建立允许Fargate进行以下操作的IAM角色： 与FSx for Lustre通信。 。创建一个Amazon Elastic File System（Amazon EFS）文件共享并建立一个IAM角色 允许Fargate与Amazon EFS通信。 D.为应用程序创建Amazon Elastic Block 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

A company has a multi-tier application that runs six front-end web servers in an Amazon EC2
Auto Scaling group in a single Availability Zone behind an Application Load Balancer (ALB).
A solutions architect needs to modify the infrastructure to be highly available without modifying
the application.
Which architecture should the solutions architect choose that provides high availability?
A. Create an Auto Scaling group that uses three instances across each of two Regions
B.Modify the Auto Scaling group to use three instances across each of two Availability Zones
C. Create an Auto Scaling template that can be used to quickly create more instances in another
Region
D. Change the ALB in front of the Amazon EC2 instances in a round-robin configuration to balance
traffic to the web tier
Answer: B
一家公司拥有一个多层应用程序，该应用程序在Amazon EC2中运行六个前端Web服务器 Auto Scaling组位于应用程序负载平衡器（ALB）后的单个可用区中。 解决方案架构师需要修改基础架构以使其高度可用，而无需修改 应用程序。 解决方案架构师应该选择哪种架构来提供高可用性？ A.创建一个Auto Scaling组，该组在两个区域的每个区域中使用三个实例 B． 修改Auto Scaling组以在两个可用区中的每个可用区中使用三个实例 C.创建一个可用于在另一个实例中快速创建更多实例的Auto Scaling模板 地区 D.在循环配置中更改Amazon EC2实例前面的ALB以平衡 网络层流量

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company runs an internal browser-based application The application runs on Amazon EC2
instances behind an Application Load Balancer.
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.
The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2
instances overnight Staff are complaining that the application is very slow when the day begins,
although it runs well by mid-morning,
How should the scaling be changed to address the staff complaints and keep costs to a
minimum?
A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown
period
C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown
period
D.
Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before
the office opens
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

A solutions architect is designing a solution to access a catalog of images and provide users with
the ability to submit requests to customize images.
lmage customization parameters will be in any request sent to an AWS API Gateway API.
The customized image will be generated on demand, and users will receive a link they can click
to view or download their customized image.
The solution must be highly available for viewing and customizing images
What is the MOST cost-effective solution to meet these requirements?
解决方案架构师正在设计一种解决方案，以访问图像目录并为用户提供
提交自定义图像请求的能力。
图像定制参数将存在于发送到AWS API Gateway API的任何请求中。
定制图像将按需生成，用户将收到一个可以单击的链接。
查看或下载其自定义图像。
该解决方案必须高度可用以查看和自定义图像
满足这些要求的最经济有效的解决方案是什么？
A. Use Amazon EC2 instances to manipulate the original image into the requested customization.
Store the original and manipulated images in Amazon S3.
Configure an Elastic Load Balancer in front of the EC2 instances.
В.
Use AWS Lambda to manipulate the original image to the requested customization.
Store the original and manipulated images in Amazon S3.
Configure an Amazon CloudFront distribution with the S3 bucket as the ongin.
C. Use AWS Lambda to manipulate the original image to the requested customization.
Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB.
Configure an Elastic Load Balancer in front of the Amazon EC2 instances.
D. Use Amazon EC2 instances to manipulate the original image into the requested customization.
Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB.
Configure an Amazon CloudFront distribution with the S3 bucket as the origin.

A.使用Amazon EC2实例将原始图像处理为请求的自定义。
将原始图像和经过处理的图像存储在Amazon S3中。
在EC2实例之前配置Elastic Load Balancer。
В。
使用AWS Lambda将原始图像处理为请求的自定义。
将原始图像和经过处理的图像存储在Amazon S3中。
使用S3存储桶作为ongin配置Amazon CloudFront分配。
C.使用AWS Lambda将原始图像处理为请求的自定义。
将原始图像存储在Amazon S3中，将经过处理的图像存储在Amazon DynamoDB中。
在Amazon EC2实例之前配置Elastic Load Balancer。
D.使用Amazon EC2实例将原始图像处理为请求的自定义。
将原始图像存储在Amazon S3中，将经过处理的图像存储在Amazon DynamoDB中。
使用S3存储桶作为源配置Amazon CloudFront分配。
Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A bicycle sharing company is developing a multi-tier architecture to track the location of its
bicycles during peak operating hours.
The company wants to use these data points in its existing analytics platform A solutions architect
must determine the most viable multi-tier option to support this architecture.
The data points must be accessible from the REST API.
Which action meets these requirements for storing and retrieving location data?
--家自行车共享公司正在开发一种多层体系结构,以跟踪其位置
高峰时段骑自行车.
该公司希望在现有的分析平台中使用这些数据点.解决方案架构师
必须确定最可行的多层选项以支持此体系结构.
数据点必须可从RESTAPI访问.
哪项操作符合存储和检索位置数据的这些要求?
A. Use Amazon Athena with Amazon S3
B. Use Amazon API Gateway with AWS Lambda
C. Use Amazon QuickSight with Amazon Redshift
D. Use Amazon API Gateway with Amazon Kinesis Data Analytics
A.将Amazon Athena与Amazon S3结合使用
B.将Amazon API Gateway与AWS Lambda一起使用
C.将Amazon QuickSight与Amazon Redshift结合使用
D.将Amazon API Gateway与Amazon Kinesis Data Analytics结合使用
Answer: D

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A solutions architect is deploying a distributed database on multiple Amazon EC2 instances.
The database stores all data on multiple instances so it can withstand the loss of an instance.
The database requires block storage with latency and throughput to support several million
transactions per second per server.
Which storage solution should the solutions architect use?
数据库将所有数据存储在多个实例上,因此它可以承受-一个实例的丢失.
数据库需要具有延迟和吞吐量的块存储，以支持数百万
每台服务器每秒的事务数.
解决方案架构师应使用哪种存储解决方案?

A. Amazon EBS
B. Amazon EC2 instance store
C. Amazon EFS
D. Amazon S3
A.亚马逊EBS
B.Amazon EC2实例存储
C. Amazon EFS
D.亚马逊S3
Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2
instances in a VPC do not traverse the internet.
What should the solutions architect do to accomplish this? (Select TWO )
解决方案架构师需要确保API从AmazonEC2调用到AmazonDynamoDB
VPC中的实例不会遍历Internet.
解决方案架构师应该怎么做才能做到这一点?(选择两个)

A. Create a route table entry for the endpoint
B. Create a gateway endpoint for DynamoDB
C. Create a new DynamoDB table that uses the endpoint
D. Create an ENI for the endpoint in each of the subnets of the VPC
E. Create a security group entry in the default security group to provide access
A.为端点创建一个路由表条目
B.为DynamoDB创建网关端点
C.创建一个使用端点的新DynamoDB表
D.在VPC的每个子网中为端点创建一一个 ENI
E.在默认安全组中创建一个安全组条目以提供访问权限
Answer: AB

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

A solutions architect is designing a web application that will run on Amazon EC2 instances behind
an Application Load Balancer (ALB).
The company strictly requires that the application be resilient against malicious internet activity
and attacks, and protect against new common vulnerabilities and exposures.
What should the solutions architect recommend?
解决方案架构师正在设计一个可在背后的AmazonEC2实例上运行的Web应用程序
应用程序负载平衡器(ALB) .
公司严格要求该应用程序具有抵御恶意互联网活动的能力
和攻击并防范新的常见漏洞和威胁.
解决方案架构师应该建议什么?

A. Leverage Amazon CloudFront with the ALB endpoint as the origin
B. Deploy an appropriate managed rule for AWS WAF and associate it with the ALB
C. Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are
blocked
D. Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2
instances
A.以ALB终端节点为源利用Amazon CloudFront
B.为AWSWAF部署适当的托管规则并将其与ALB关联
C.订阅AWS Shield Advanced并确保常见漏洞和风险
受阻
D.配置网络ACL和安全组以仅允许端口80和443访问EC2
实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

A company has been storing analytics data in an Amazon RDS instance for the past few years.
The company asked a solutions architect to find a solution that allows users to access this data
using an API.
The expectation is that the application will experience periods of inactivity but could receive
bursts of traffic within seconds.
Which solution should the solutions architect suggest?
过去几年，一家公司一直将分析数据存储在AmazonRDS实例中.
该公司要求解决方案架构师找到--种允许用户访问此数据的解决方案
使用API
期望该应用程序将经历-段时间的不活动状态,但可能会收到
在几秒钟内爆发出大量流量.
解决方案架构师应建议哪种解决方案?

A. Set up an Amazon API Gateway and use Amazon ECS.
B. Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
C. Set up an Amazon API Gateway and use AWS Lambda functions
D. Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling
A.设置一- 个Amazon API Gateway并使用Amazon ECS.
B.设置一-个Amazon API Gateway并使用AWS Elastic Beanstalk.
C.设置AmazonAPIGateway并使用AWSLambda函数
D.设置Amazon API Gateway并将Amazon EC2与Auto Scaling一起使用

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

A company's web application is using multiple Linux Amazon EC2 instances and storing data on
Amazon EBS volumes.
The company is looking for a solution to increase the resiliency of the application in case of a
failure and to provide storage that complies with atomicity, consistency, isolation, and durability
(ACID).
What should a solutions architect do to meet these requirements?

公司的Web应用程序正在使用多个LinuxAmazonEC2实例并将数据存储石
Amazon EBS卷.
该公司正在寻找一种解决方案,以在出现以下情况时提高应用程序的弹性:
故障并提供符合原子性,一致性,隔离性和持久性的存储(酸)
解决方案架构师应该怎么做才能满足这些要求?

A. Launch the application on EC2 instances in each Availability Zone.
Attach EBS volumes to each EC2 instance.
B.
Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones.
Mount an instance store on each EC2 instance.
C. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones.
Store data on Amazon EFS and mount a target on each instance.
D.
Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones.
Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-lA).
A.在每个可用区中的EC2实例上启动应用程序.
将EBS卷附加到每个EC2实例.
B.使用跨多个可用区的Auto Scaling组创建一个Application Load Balancer.
在每个EC2实例上安装一个实例存储.
C.使用跨多个可用区的Auto Scaling组创建- -个Application Load Balancer.
将数据存储在AmazonEFS上，并在每个实例上安装-一个目标.
D.使用跨多个可用区的AutoScaling组创建--.个ApplicationLoadBalancer.
使用Amazon S3一区不频繁访问(S3 One Zone-IA)存储数据.
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

A company has an application that calls AWS Lambda functions.
A recent code review found database credentials stored in the source code.
The database credentials need to be removed from the Lambda source code.
The credentials must then be securely stored and rotated on an ongoing basis to meet security
policy requirements.
What should a solutions architect recommend to meet these requirements?

公司拥有一个调用AWS Lambda函数的应用程序.
最近的代码审查发现源代码中存储了数据库凭据.
需要从Lambda源代码中删除数据库凭据.
然后必须安全地存储凭据并不断进行轮换以符合安全性
政策要求.
解决方案架构师应建议哪些以满足这些要求?

A. Store the password in AWS CloudHSM.
Associate the Lambda function with a role that can retrieve the password from CloudHSM given
its key ID.
B. Store the password in AWS Secrets Manager.
Associate the Lambda function with a role that can retrieve the password from Secrets Manager
given its secret ID.
C. Move the database password to an environment variable associated with the Lambda function.
Retrieve the password from the environment variable upon execution.
D. Store the password in AWS Key Management Service (AWS KMS).
Associate the L ,ambda function with a role that can retrieve the password from AWS KMS given
its key ID.
A.将密码存储在AWS CloudHSM中.
将Lambda函数与可以从给定的CloudHSM检索密码的角色相关联
它的密钥ID.
B.将密码存储在AWS Secrets Manager中.
将Lambda函数与可以从SecretsManager检索密码的角色相关联
给出其秘密ID.
C.将数据库密码移至与Lambda函数关联的环境变量.
执行时从环境变量中检索密码.
D.将密码存储在AWS Key Management Service ( AWS KMS)中.
将Lambda函数与可以从给定的AWSKMS检索密码的角色相关联
它的密钥ID.
Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A solutions architect needs the static website within an Amazon S3 bucket. A solutions architect
needs to ensure that data can be recovered in case of accidental deletion.
Which action will accomplish this?
A. Enable Amazon S3 versioning
B. Enable Amazon S3 Intelligent-Tiering.
C. Enable an Amazon S3 lifecycle policy
D. Enable Amazon S3 cross-Region replication.
Answer: A

问题13
解决方案架构师需要在AmazonS3存储桶中使用静态网站.
哪个动作可以完成此任务?
A.启用AmazonS3版本控制
B.启用AmazonS3智能分层.
C.启用AmazonS3生命周期策略
D.启用Amazon S3跨区域复制

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A company is managing health records on-premises.
The company must keep these records indefinitely, disable any modifications to the records once
they are stored, and granularly audit access at all levels.
The chief technology officer (CTo) is concerned because there are already millions of records notbeing used by any application, and the current infrastructure is running out of space.
The cTo has requested a solutions architect design a solution to move existing data and support
future records.
Which services can the solutions architect recommend to meet these requirements'?
一家公司正在本地管理健康记录。 公司必须无限期地保留这些记录，一次禁止对记录进行任何修改 它们被存储，并在各个级别对访问进行细粒度的审核。 首席技术官（CTo）担心，因为已经有数百万条记录未被任何应用程序使用，并且当前的基础架构空间不足。 cTo已要求解决方案架构师设计解决方案以移动现有数据和支持 将来的记录。 解决方案架构师可以推荐哪些服务来满足这些要求？
A. Use AWS DataSync to move existing data to AWS.
Use Amazon S3 to store existing and new data.
Enable Amazon S3 object lock and enable AWS CloudTrail with data events.
B. Use AWS Storage Gateway to move existing data to AWS.
Use Amazon S3 to store existing and new data.
Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
C. Use AWS DataSync to move existing data to AWS.
Use Amazon S3 to store existing and new data.
Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
D. Use AWS Storage Gateway to move existing data to AWS.
Use Amazon Elastic Block Store (Amazon EBS) to store existing and new data.
Enable Amazon S3 object lock and enable Amazon S3 server access logging,
A.使用AWS DataSync将现有数据移至AWS。使用Amazon S3存储现有数据和新数据。启用Amazon S3对象锁定，并为AWS CloudTrail启用数据事件。 B.使用AWS Storage Gateway将现有数据移至AWS。使用Amazon S3存储现有数据和新数据。启用Amazon S3对象锁定，并通过管理事件启用AWS CloudTrail。 C.使用AWS DataSync将现有数据移至AWS。使用Amazon S3存储现有数据和新数据。启用Amazon S3对象锁定，并通过管理事件启用AWS CloudTrail。 D.使用AWS Storage Gateway将现有数据移至AWS。使用Amazon Elastic Block Store（Amazon EBS）存储现有数据和新数据。启用Amazon S3对象锁定并启用Amazon S3服务器访问日志记录，
A

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company currently operates a web application backed by an Amazon RDS MySQL database.
It has automated backups that are run daily and are not encrypted.
A security audit requires future backups to be encrypted and the unencrypted backups to be
destroyed.
The company will make at least one encrypted backup before destroying the old backups
What should be done to enable encryption for future backups?
A. Enable default encryption for the Amazon S3 bucket where backups are stored
B. Modify the backup section of the database configuration to toggle the Enable encryption check
box.
C. Create a snapshot of the database.
Copy it to an encrypted snapshot.
Restore the database from the encrypted snapshot.
D. Enable an encrypted read replica on RDS for MySQL.
Promote the encrypted read replica to primary.
Remove the original database instance.
Answer: C
一家公司当前正在运行由Amazon RDS MySQL数据库支持的Web应用程序。它具有每天运行且未加密的自动备份。安全审核要求对将来的备份进行加密，而将未加密的备份销毁。在销毁旧备份之前，公司将至少进行一次加密备份，应如何做才能为以后的备份启用加密？ A.为存储备份的Amazon S3存储桶启用默认加密B.修改数据库配置的“备份”部分以切换“启用加密”复选框。 C.创建数据库快照。 将其复制到加密的快照。从加密的快照还原数据库。 D.在MySQL的RDS上启用加密的只读副本。将加密的只读副本提升为主数据库。删除原始数据库实例。答案：C说明：Amazon RDS使用快照进行备份。仅当数据库已加密时，快照才会在创建时进行加密，并且只能在首次创建数据库时为数据库选择加密。在这种情况下，数据库以及快照均未加密。但是，您可以创建快照的加密副本。您可以使用该快照进行还原，该快照将创建一个启用了加密的新数据库实例。从那时起，将为所有快照启用加密。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A client reports that they want see an audit log of any changes made to AWS resources in their
account,
What can the client do to achieve this?
A. Set up Amazon CloudWatch monitors on services they own
B. Enable AWS CloudTrail logs to be delivered to an Amazon S3 bucket
C. Use Amazon CloudWatch Events to parse logs
D. Use AWS OpsWorks to manage their resources
Answer: B
Explanation:
A CloudTrail trail can be created which delivers log files to an Amazon S3 bucket.

客户端报告他们希望查看其日志中对AWS资源所做的任何更改的审核日志
帐户，
客户可以做些什么来实现这一目标？
A.在他们拥有的服务上设置Amazon CloudWatch监视器
B.启用将AWS CloudTrail日志传递到Amazon S3存储桶
C.使用Amazon CloudWatch Events解析日志
D.使用AWS OpsWorks来管理其资源
答案：B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

An application running in a private sübnet accesses an Amazon DynamoDB table. There is a
security requirement that the data never leave the AWS network.
How should this requirement be met?
A. Configure a network ACL on DynamoDB to limit traffic to the private subnet
B. Enable DynamoDB encryption at rest using an AWS KMS key
C. Add a NAT gateway and configure the route table on the private subnet
D. Create a VPC endpoint for DynamoDB and configure the endpoint policy
Answer: D
在专用sübnet中运行的应用程序访问Amazon DynamoDB表。
数据永不离开AWS网络的安全性要求。
应如何满足此要求？
A.在DynamoDB上配置网络ACL，以限制到专用子网的流量
B.使用AWS KMS密钥启用静态DynamoDB加密
C.添加一个NAT网关并在专用子网上配置路由表
D.为DynamoDB创建VPC端点并配置端点策略
答案：D

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A three-tier application is being created to host small news articles. The application is expected to
serve millions of users. When breaking news occurs, the site must handle very large spikes in
traffic without significantly impacting database performance.
Which design meets these requirements while minimizing costs?
A. Use Auto Scaling groups to increase the number of Amazon EC2 instances delivering the web
application
B. Use Auto Scaling groups to increase the size of the Amazon RDS instances delivering the
database
C. Use Amazon DynamoDB strongly consistent reads to adjust for the increase in traffic
D. Use Amazon DynamoDB Accelerator (DAX) to cache read operations to the database
Answer: D
正在创建一个三层应用程序来托管小新闻。该应用程序有望
为数百万用户提供服务。当发生重大新闻时，该网站必须处理
流量，而不会显着影响数据库性能。
哪种设计可以在最小化成本的同时满足这些要求？
A.使用Auto Scaling组来增加交付Web的Amazon EC2实例的数量
应用
B.使用Auto Scaling组来增加交付的Amazon RDS实例的大小
数据库
C.使用Amazon DynamoDB高度一致的读取来调整流量的增长
D.使用Amazon DynamoDB Accelerator（DAX）将读取操作缓存到数据库
答案：D

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

During a review of business applications, a Solutions Architect identifies a critical application with
a relational database that was built by a business user and is running on the user's desktop. To
reduce the risk of a business interruption, the Solutions Architect wants to migrate the application
to a highly available, multi-tiered solution in AWS.
What should the Solutions Architect do to accomplish this with the LEAST amount of disruption to
the business?
A. Create an import package of the application code for upload to AWS Lambda, and include a
function to create another L ambda function to migrate data into an Amazon RDS database
B. Create an image of the user's desktop, migrate it to Amazon EC2 using VM Import, and place the
EC2 instance in an Auto Scaling group
C. Pre-stage new Amazon EC2 instances running the application code on AWS behind an
Application Load Balancer and an Amazon RDS Multi-AZ DB instance
D. Use AWS DMS to migrate the backend database to an Amazon RDS Multi-AZ DB instance.
Migrate the application code to AWS Elastic Beanstalk
Answer: D
在审查业务应用程序时，解决方案架构师使用以下命令识别关键应用程序：
由业务用户构建并在用户桌面上运行的关系数据库。
降低业务中断的风险，解决方案架构师希望迁移应用程序
到AWS中高度可用的多层解决方案。
解决方案架构师应该怎么做才能做到最少
这生意？
A.创建应用程序代码的导入包以上传到AWS Lambda，并包括一个
函数创建另一个Lmbda函数以将数据迁移到Amazon RDS数据库
B.创建用户桌面的映像，使用VM Import将其迁移到Amazon EC2，然后放置
Auto Scaling组中的EC2实例
C.在新的Amazon EC2实例的预备阶段，在AWS后面的AWS上运行应用程序代码
应用程序负载均衡器和Amazon RDS Multi-AZ数据库实例
D.使用AWS DMS将后端数据库迁移到Amazon RDS Multi-AZ数据库实例。
将应用程序代码迁移到AWS Elastic Beanstalk
答案：D

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

A company has thousands of files stored in an Amazon S3 bucket that has a well-defined access
pattern. The files are accessed by an application multiple times a day for the first 30 days. Files
are rarely accessed within the next 90 days. After that, the files are never accessed again. During
the first 120 days, accessing these files should never take more than a few seconds.
Which lifecycle policy should be used for the S3 objects to minimize costs based on the access
pattern?
A. Use Amazon S3 Standard-lnfrequent Access (S3 Standard-lA) storage for the first 30 days. Then
move the files to the GLACIER storage class for the next 90 days. Allow the data to expire after
that.
.B. Use Amazon S3 Standard storage for the first 30 days. Then move the files to Amazon S3
Standard- Infrequent Access (S3 Standard-lA) for the next 90 days. Allow the data to expire after
that.
C. Use Amazon S3 Standard storage for first 30 days. Then move the files to the GL ACIER storage
class for the next 90 days. Allow the data to expire after that.
D. Use Amazon S3 Standard-Infrequent Access (S3 Standard-lA) for the first 30 days. After that,
move the data to the GLACIER storage class, where is will be deleted automatically.

Answer: B

一家公司在一个具有明确定义的访问权限的Amazon S3存储桶中存储了数千个文件
模式。在前30天内，应用程序每天多次访问文件。档案
在接下来的90天内很少访问。之后，将不再访问文件。中
在最初的120天内，访问这些文件的时间绝对不应超过几秒钟。
应该为S3对象使用哪种生命周期策略以最大程度地减少基于访问的成本
模式？
A.前30天使用Amazon S3标准不频繁访问（S3 Standard-1A）存储。然后
在接下来的90天内将文件移至GLACIER存储类。允许数据过期后
那。
 B.前30天使用Amazon S3 Standard存储。然后将文件移至Amazon S3
未来90天的标准不频繁访问（S3 Standard-IA）。允许数据过期后
那。
C.前30天使用Amazon S3 Standard存储。然后将文件移至GL ACIER存储
下90天的课程。之后允许数据过期。
D.前30天使用Amazon S3 Standard-Infrequent Access（S3 Standard-IA）。之后，
将数据移至GLACIER存储类，该类将被自动删除。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company creates business-critical 3D images every night. The images are batch-processed
every Friday and require an uninterrupted 48 hours to complete.
What is the MOST cost-effective Amazon EC2 pricing model for this scenario?
A. On-Demand Instances
B. Scheduled Reserved Instances
C. Reserved Instances
D. Spot Instances
Answer: B

公司每天晚上都会创建关键业务3D图像。 图像被批处理
每个星期五，需要不间断的48小时才能完成。
在这种情况下，最具成本效益的Amazon EC2定价模型是什么？
A.按需实例
B.预定的预留实例
C.预留实例
D.竞价型实例
答案：B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

An application generates audit logs of operational activities. Compliance requirements mandate
that the application retain the logs for 5 years.How can these requirements be met?
A.Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA
Delete) on the bucket.
B. Save the logs in an Amazon EFS volume and use Network File System version 4 (NFSv4) locking
with the volume.
C. Save the logs in an Amazon Glacier vault and use the Vault Lock feature.
D. Save the logs in an Amazon EBS volume and take monthly snapshots.
Answer: C
应用程序生成操作活动的审核日志。 合规要求规定
该应用程序将日志保留5年。
如何满足这些要求？
A将日志保存在Amazon S3存储桶中并启用多因素身份验证删除（MFA）
删除）。
B.将日志保存在Amazon EFS卷中，并使用网络文件系统版本4（NFSv4）锁定
与音量。
C.将日志保存在Amazon Glacier保管库中，并使用保管库锁定功能。
D.将日志保存在Amazon EBS卷中，并每月拍摄一次快照。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

A Solutions Architect is creating an application running in an Amazon VPC that needs to access
AWS Systems Manager Parameter Store. Network security rules prohibit any route table entry
with a 0.0.0.0/0 destination.
What infrastructure addition will allow access to the AWS service while meeting the
requirements?
A. VPC peering
B. NAT instance
C. NAT gateway
D. AWS PrivateLink

解决方案架构师正在创建运行在需要访问的Amazon VPC中的应用程序
AWS Systems Manager参数存储。 网络安全规则禁止任何路由表条目
目的地为0.0.0.0/0。
在满足以下条件的同时，添加了哪些基础架构可以访问AWS服务：
要求？
A.VPC对等
B. NAT实例
C.NAT网关
D.AWS PrivateLink

Answer: D

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

A photo-sharing website running on AWS allows users to generate thumbnail images of photos
stored in Amazon S3. **An Amazon DynamoDB tabl**e maintains the locations of photos, and
thumbnails are easily re- created from the originals if they are accidentally deleted.
How should the thumbnail images be stored to ensure the LOWEST cost?
A. Amazon S3 Standard-lnfrequent Access (S3 Standard-lA) with cross-region replication
B. Amazon S3
C. Amazon Glacier
D. Amazon S3 with cross-region replication
Answer: B
在AWS上运行的照片共享网站允许用户生成存储在Amazon S3中的照片的缩略图。 Amazon DynamoDB表可维护照片的位置，
如果不小心删除了缩略图，则可以轻松地从原始照片重新创建缩略图。缩略图应如何存储以确保最低成本？
A.具有跨区域复制的Amazon S3标准不频繁访问（S3 Standard-IA）B.Amazon S3
C.Amazon Glacier D.具有跨区域复制的Amazon S3

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company is implementing **a data lake solution** on Amazon S3. lts security policy mandates that
the data stored in Amazon S3 should be **encrypted** at rest.
Which options can achieve this? (Select TWO.)
A. Use S3 server-side encryption with an Amazon EC2 key pair.
B. Use S3 server-side encryption with customer-provided keys (**SSE**-C).
C. Use S3 bucket policies to restrict access to the data at rest,
D. Use **client-side encryption** before ingesting the data to Amazon S3 using encryption keys.
E. Use SSL to encrypt the data while in transit to Amazon S3.

一家公司正在Amazon S3上实施数据湖解决方案。 安全政策规定
存储在Amazon S3中的数据应在静止状态下进行加密。
哪些选项可以实现这一目标？ （选择两个。）
A.将S3服务器端加密与Amazon EC2密钥对一起使用。
B.使用带有客户提供的密钥（SSE-C）的S3服务器端加密。
C.使用S3存储桶策略来限制对静态数据的访问，
D.在使用加密密钥将数据提取到Amazon S3之前，使用客户端加密。
E.在传输到Amazon S3时，使用SSL加密数据。

Answer: BD

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A solutions architect has created a new AWS account and must **secure AWS account root user**
**access**.解决方案架构师创建了一个新的AWS账户，必须保护AWS账户根用户
访问。
Which combination of actions will accomplish this? (Select TWO.)
A. Ensure the root user uses a **strong password**
B. Enable **multi-factor authentication** to the root user
C. Store root user access keys in an encrypted Amazon S3 bucket
D. Add the root user to a group containing administrative permissions.
E. Apply the required permissions to the root user with an inline policy document
Answer: AB

哪种动作组合可以达到目的？ （选择两个。）
A.确保root用户使用强密码
B.对根用户启用多因素身份验证
C.将root用户访问密钥存储在加密的Amazon S3存储桶中
D.将root用户添加到包含管理权限的组中。
E.使用内联策略文档将所需权限应用于根用户Explanation:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

A company's application runs on Amazon EC2 instances behind an Application Load Balancer
(ALB).
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.
**On the first day öf every month at midnight the application becomes much slower when the**
**month-end financial calculation batch executes**.
This causes the CPU utilization of the EC2 instances to immediately peak to 100% which disrupts the application.
What should a solutions architect recommend to ensure the application is able to handle the
workload and avoid downtime?
公司的应用程序在Application Load Balancer后面的Amazon EC2实例上运行（ALB）。
实例在多个可用区中的Amazon EC2 Auto Scaling组中运行。在每个月的午夜第一天，当执行月末财务计算批处理。
这会导致EC2实例的CPU使用率立即达到100％，从而中断应用程序。解决方案架构师应建议什么以确保应用程序能够处理工作量和避免停机？

A. Configure an Amazon CloudFront distribution in front of the ALB
B. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization
C. Configure an **EC2 Auto Scaling scheduled scaling policy** based on the monthly schedule.
D. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances
A.在ALB之前配置Amazon CloudFront分配
B.根据CPU使用率配置EC2自动扩展简单扩展策略
C.根据月度计划配置EC2自动扩展计划的扩展策略。
D.配置Amazon ElastiCache以从EC2实例中删除一些工作负载
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

A company is migrating from an on-premises infrastructure to the AWS Cloud.
One of the company's applications stores files on a Windows file server farm that uses Distributed
File System Replication (DFSR) to keep data in sync.
A solutions architect needs to replace the file server farm.
Which service should the solutions architect use?
A. Amazon EFS
B. Amazon FSx
C. Amazon S3
D. AWS Storage Gateway
Answer: B
一家公司正在从内部部署基础架构迁移到AWS云。该公司的应用程序之一将文件存储在Windows文件服务器场中，
该服务器场使用分布式文件系统复制（DFSR）保持数据同步。解决方案架构师需要替换文件服务器场。解决方案架构师应使用哪种服务？ 
A.Amazon EFS B.Amazon FSx C.Amazon S3 D.AWS Storage Gateway

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company's website is used to sell products to the public.
The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load
Balancer (ALB).
There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against
SQL injection attacks.
The ALB is the origin for the CloudFront distribution.
A recent review of security logs revealed an external malicious IP that needs to be blocked from
accessing the website.
What should a solutions architect do to protect the application?
A. Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP
address
B. Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP
address
C. Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the
malicious IP address
D. Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the
malicious IP address
Answer: B
公司的网站用于向公众销售产品。该站点在应用程序负载平衡器（ALB）后面的Auto Scaling组中的Amazon EC2实例上运行。还有一个Amazon CloudFront发行版，AWS WAF被用来防御SQL注入攻击。 ALB是CloudFront分发的来源。 最近对安全日志的审查显示，需要阻止外部恶意IP访问该网站。解决方案架构师应该怎么做才能保护应用程序？ A.修改CloudFront分发上的网络ACL以添加针对恶意IP地址的拒绝规则B.修改AWS WAF的配置以添加IP匹配条件以阻止恶意IP地址C.修改EC2实例的网络ACL在ALB后面的目标组中拒绝恶意IP地址D。在ALB后面的目标组中修改EC2实例的安全组以拒绝恶意IP地址

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis.
An application on an Amazon EC2 instance needs permission to efficiently process the CSV data
stored in the S3 bucket.
Which action will MOST securely grant the EC2 instance access to the S3 bucket?
A. Attach a resource- based policy to the S3 bucket
B. Create an IAM user for the application with specific permissions to the S3 bucket
C. Associate an IAM role with least privilege permissions to the EC2 instance profile
D. Store AWS credentials directly on the EC2 instance for applications on the instance to use for API
calls
Answer: C
一家营销公司将CSV文件存储在Amazon S3存储桶中，以进行统计分析。 
Amazon EC2实例上的应用程序需要权限才能有效处理S3存储桶中存储的CSV数据。 MOST将安全地授予EC2实例对S3存储桶的访问权限是什么？ 
A.将基于资源的策略附加到S3存储桶
B.为具有S3存储桶特定权限的应用程序创建IAM用户
C.将IAM角色与对EC2实例配置文件的最小特权权限相关联
D.将AWS凭证直接存储在EC2实例，该实例上的应用程序可用于API调用

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A solutions architect is designing a solution where users will De directed to a backup static error
page it the primary website is unavailable.
The primary website's DNS records are hosted in Amazon Route 53 where their domain is
pointing to an Application Load Balancer (ALB),
Which configuration should the solutions architect use to meet the company's needs while
minimizing changes and infrastructure overhead?
A. Point a Route 53 alias record to an Amazon CloudFront distribution with the ALB as one of its
origins.
Then, create custom error pages for the distribution.
B. Set up a Route 53 active-passive failover configuration.
Direct traffic to a static error page hosted within an Amazon S3 bucket when Route 53 health
checks determine that the ALB endpoint is unhealthy.
C. Update the Route 53 record to use a latency-based routing policy.
Add the backup static error page hosted within an Amazon S3 bucket to the record So the traffic is
sent to the most responsive endpoints.
D. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting
a static error page as endpoints.
Route 53 will only send requests to the instance if the health checks fail for the ALB.
Answer: B 
解决方案架构师正在设计一种解决方案，在该解决方案中，如果主网站不可用，用户将被定向到备份静态错误页面。
主要网站的DNS记录托管在Amazon Route 53中，其域指向一个应用程序负载平衡器（ALB），
解决方案架构师应使用哪种配置来满足公司的需求，同时最大程度地减少更改和基础架构开销？ 
A.将Route 53别名记录指向以ALB作为其起源之一的Amazon CloudFront分配。然后，为分发创建自定义错误页面。 
B.设置Route 53主动-被动故障转移配置。当Route 53运行状况检查确定ALB终端节点不健康时，将流量定向到Amazon S3存储桶中托管的静态错误页面。 
C.更新Route 53记录以使用基于延迟的路由策略。将托管在Amazon S3存储桶中的备份静态错误页面添加到记录中，以便将流量发送到响应最快的终端节点。
D.使用ALB和托管静态错误页面的Amazon EC2实例，设置Route 53主动-主动配置。仅当ALB的运行状况检查失败时，路由53才会将请求发送到实例。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

A solutions architect is designing the cloud architecture for a new application being deployed on
AWS
The process should run in parallel while adding and removing application nodes as needed based
on the number of jobs to be processed.
The processor application is stateless.
The solutions architect must ensure that the application is loosely coupled and the job items are
durably stored.
Which design should the solutions architect use?
A. Create an Amazon SNS topic to send the jobs that need to be processed.
Create an Amazon Machine Image (AMI) that consists of the processor application.
Create a launch configuration that uses the AMl.
Create an Auto Scaling group using the launch configuration.
Set the scaling policy for the Auto Scaling group to add and remove nodes based on CPU usage
B. Create an Amazon SQS queue to hold the jobs that need to be processed.
Create an Amazon Machine Image (AMI) that consists of the processor application.
Create a launch configuration that uses the AMl.
Create an Auto Scaling group using the launch configuration.
Set the scaling policy for the Auto Scaling group to add and remove nodes based on network
usage
C. Create an Amazon SQS queue to hold the jobs that needs to be processed.
Create an Amazon Machine Image (AMI) that consists of the processor application.
Create a launch template that uses the AMI.
Create an Auto Scaling group using the launch template.
Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number
of items in the SQS queue
D. Create an Amazon SNS topic to send the jobs that need to be processed.
Create an Amazon Machine Image (AMI) that consists of the processor application.
Create a launch template that uses the AMI.
Create an Auto Scaling group using the launch template.
Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number
of messages published to the SNS topic.
Answer: C
解决方案架构师正在为在AWS上部署的新应用程序设计云架构。该过程应并行运行，同时根据要处理的作业数根据需要添加和删除应用程序节点。
处理器应用程序是无状态的。解决方案架构师必须确保应用程序松散耦合，并且持久存储作业项。解决方案架构师应使用哪种设计？
A.创建一个Amazon SNS主题以发送需要处理的作业。创建一个由处理器应用程序组成的Amazon Machine Image（AMI）。创建使用AM1的启动配置。使用启动配置创建一个Auto Scaling组。设置Auto Scaling组的扩展策略，以根据CPU使用情况
B添加和删除节点。创建Amazon SQS队列以容纳需要处理的作业。
创建一个由处理器应用程序组成的Amazon Machine Image（AMI）。创建使用AM1的启动配置。使用启动配置创建一个Auto Scaling组。为Auto Scaling组设置缩放策略，以根据网络使用情况
C添加和删除节点。创建Amazon SQS队列以保存需要处理的作业。创建一个由处理器应用程序组成的Amazon Machine Image（AMI）。创建使用AMI的启动模板。使用启动模板创建一个Auto Scaling组。设置Auto Scaling组的缩放策略，以根据SQS队列D中的项目数添加和删除节点。

创建Amazon SNS主题以发送需要处理的作业。创建一个由处理器应用程序组成的Amazon Machine Image（AMI）。创建使用AMI的启动模板。使用启动模板创建一个Auto Scaling组。设置Auto Scaling组的缩放策略，以根据发布到SNS主题的消息数添加和删除节点

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company has a legacy application that processes data in two parts.
The second part of the process takes longer than the first, so the company has decided to rewrite
the application as two microservices running on Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?
A. Implement code in microservice 1to send data to an Amazon S3 bucket.
Use S3 event notifications to invoke microservice 2.
B. Implement code in microservice 1 to publish data to an Amazon SNS topic.
Implement code in microservice 2 to subscribe to this topic.
C. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose.
Implement code in microservice 2 to read from Kinesis Data Firehose.
D. Implement code in microservice 1 to send data to an Amazon SQS queue.
Implement code in microservice 2 to process messages from the queue.
Answer: D
公司有一个遗留应用程序，该应用程序分两部分处理数据。该过程的第二部分需要比第一部分更长的时间，
因此该公司决定将应用程序重写为在Amazon ECS上运行的两个可独立扩展的微服务。解决方案架构师应如何集成微服务？
A.在微服务1中实施代码以将数据发送到Amazon S3存储桶。使用S3事件通知调用微服务2。
B.在微服务1中实现代码以将数据发布到Amazon SNS主题。在微服务2中实现代码以订阅该主题。
C.在微服务1中实施代码以将数据发送到Amazon Kinesis Data Firehose。在微服务2中实现代码以从Kinesis Data Firehose读取。 
D.在微服务1中实施代码以将数据发送到Amazon SQS队列。在微服务2中实现代码以处理来自队列的消息

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A solutions architect at an ecommerce company wants to back up application log data to Amazon
S3.
The solutions architect is unsure how frequently the logs will be accessed or which logs will be
accessed the most.
The company wants to keep costs as low as possible by using the appropriate S3 storage class.
Which S3 storage class should be implemented to meet these requirements?
A. S3 Glacier
B. S3 Intelligent-Tiering
C. S3 Standard-lnfrequent Access (S3 Standard-lA)
D. S3 One Zone-Infrequent Access (S3 One Zone-lA)
Answer: B
一家电子商务公司的解决方案架构师希望将应用程序日志数据备份到Amazon S3。解决方案架构师无法确定日志的访问频率或访问最多的日志。
该公司希望通过使用适当的S3存储类别来尽可能降低成本。应该实现哪种S3存储类别以满足这些要求？
A. S3冰川B. S3智能分层C. S3标准不频繁访问（S3 Standard-1A）D. S3一区不频繁访问（S3 One Zone-1A）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A security team wants to limit access to specific services or actions in all of the team's AWS
accounts.
All accounts belong to a large organization in AWS Organizations.
The solution must be scalable and there must be a single point where permissions can be
maintained.
What should a solutions architect do to accomplish this?
A. Create an ACL to provide access to the services or actions.
B. Create a security group to allow accounts and attach it to user groups
C. Create cross-account roles in each account to deny access to the services or actions.
D. Create a service control policy in the root organizational unit to deny access to the services or
actions
Answer: D
安全团队希望限制对该团队所有AWS账户中特定服务或操作的访问。所有账户均属于AWS Organizations中的大型组织。
该解决方案必须是可扩展的，并且必须在单个点上可以维护权限。
解决方案架构师应该怎么做才能做到这一点？ 
A.创建一个ACL以提供对服务或操作的访问。 B.创建一个安全组以允许帐户并将其附加到用户组
C.在每个帐户中创建跨帐户角色以拒绝对服务或操作的访问。 D.在根组织单位中创建服务控制策略以拒绝对服务或操作的访问

1
2
3
4
5
6
7
8
9

You are trying to launch an EC2 instance, however the instance seems to go into a terminated
status immediately. What would probably not be a reason that this is happening?
A. The AMI is missing a required part.
B. The snapshot is corrupt.
C. You need to create storage in EBS first.
D. You've reached your volume limit.
Answer: C
您正在尝试启动EC2实例，但是该实例似乎立即进入终止状态。发生这种情况的原因可能不是什么原因？
答：AMI缺少必需的部分。 B.快照已损坏。 C.您需要首先在EBS中创建存储。 D.您已达到音量限制

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

You have set up an Auto Scaling group. The cool down period for the Auto Scaling group is 7
minutes. The first instance is launched after 3 minutes, while the second instance is launched
after 4 minutes. How many minutes after the first instance is launched will Auto Scaling accept
another scaling activity request?
A.11 minutes
B.7 minutes
C.10 minutes
D.14 minutes
Answer: A 
您已设置一个Auto Scaling组。 Auto Scaling组的冷却时间为7分钟。
第一个实例在3分钟后启动，而第二个实例在4分钟后启动。第一个实例启动后多少分钟，Auto Scaling会接受另一个扩展活动请求？ 
A.11分钟B.7分钟C.10分钟D.14分钟

1
2
3
4
5
6
7
8
9

In Amazon EC2 Container Service components, what is the name of a logical grouping of
container instances on which you can place tasks?
A. A cluster
B. A container instance
C. A container
D. A task definition
Answer: A
在Amazon EC2容器服务组件中，可以放置任务的容器实例的逻辑分组的名称是什么？ 
A.集群B.容器实例C.容器D.任务定义

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

In the context of AWS support, why must an EC2 instance be unreachable for 20 minutes rather
than allowing customers to open tickets immediately?
A. Because most reachability issues are resolved by automated processes in less than 20 minutes
B. Because all EC2 instances are unreachable for 20 minutes every day when AWS does routine
maintenance
C. Because all EC2 instances are unreachable for 20 minutes when first launched
D. Because of all the reasons listed here
Answer: A
在AWS支持的情况下，为什么必须在20分钟内无法访问EC2实例，而不是允许客户立即打开票证？ 
A.因为大多数可及性问题都可以在不到20分钟的时间内由自动化流程解决B.因为当AWS执行例行维护时，每天所有EC2实例在20分钟内都无法访问
C.因为首次启动时，所有EC2实例在20分钟内都无法访问D.由于这里列出的所有原因

1
2
3
4
5
6
7
8

Can a user get a notification of each instance start 1 terminate configured with Auto Scaling?
A. Yes, if configured with the Launch Config
B. Yes, always
C. Yes, if configured with the Auto Scaling group
D. No
Answer: C
用户是否可以收到有关每个实例的通知，该实例从1开始配置为Auto Scaling终止？
A.是，如果配置了启动配置B.是，始终是C.是，如果配置了Auto Scaling组D.否

1
2
3
4
5
6
7
8

Amazon EBS provides the ability to create backups of any Amazon EC2 volume into what is
known as___.
A. snapshots
B. images
C. instance backups
D. mirrors
Answer: A
Amazon EBS提供了将任何Amazon EC2卷的备份创建到称为___的功能。 A.快照B.映像C.实例备份D.镜像

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

To specify a resource in a policy statement, in Amazon EC2, can you use its Amazon Resource
Name (ARN)?
A. Yes, you can.
B. No, you can't because EC2 is not related to ARN.
C. No, you can't because you can't specify a particular Amazon EC2 resource in an IAM policy.
D. Yes, you can but only for the resources that are not affected by the action.
Answer: A
要在策略声明中指定资源，您可以在Amazon EC2中使用其Amazon Resource Name（ARN）吗？
答：可以。 B.不，您不能，因为EC2与ARN不相关。
C.不，您不能，因为您无法在IAM策略中指定特定的Amazon EC2资源。 D.是的，您只能但不受操作影响的资源

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

After you recommend Amazon Redshift to a client as an alternative solution to paying data
warehouses to analyze his data, your client asks you to explain why you are recommending
Redshift. Which of the following would be a reasonable response to his request?
A. It has high performance at scale as data and query complexity grows.
B. It prevents reporting and analytic processing from interfering with the performance of OLTP
workloads.
C. You don't have the administrative burden of running your own data warehouse and dealing with
setup, durability, monitoring, scaling, and patching.
D. All answers listed are a reasonable response to his question
Answer: D
在向客户推荐Amazon Redshift作为支付数据仓库分析其数据的替代解决方案之后，您的客户会要求您解释为什么推荐Redshift。
以下哪项是对他的要求的合理回应？
答：随着数据和查询复杂性的增长，它具有大规模的高性能。 B.它可以防止报告和分析处理干扰OLTP工作负载的性能。
C.您没有运行自己的数据仓库以及处理设置，持久性，监视，扩展和修补的管理负担。 D.列出的所有答案都是对他问题的合理回答

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

One of the criteria for a new deployment is that the customer wants to use AWS Storage
Gateway. However you are not sure whether you should use gateway-cached volumes or
gateway-stored volumes or even what the differences are. Which statement below best describes
those differences?
A. Gateway-cached lets you store your data in Amazon Simple Storage Service (Amazon S3) and
retain a copy of frequently accessed data subsets locally.Gateway-stored enables you to configure your on-premises gateway to store all your data locally
and then asynchronously back up point-in-time snapshots of this data to Amazon S3.
B. Gateway-cached is free whilst gateway-stored is not.
C. Gateway-cached is up to 10 times faster than gateway-stored.
D. Gateway-stored lets you store your data in Amazon Simple Storage Service (Amazon S3) and
retain a copy of frequently accessed data subsets locally.
Gateway-cached enables you to configure your on-premises gateway to store all your data locally
and then asynchronously back up point-in-time snapshots of this data to Amazon S3.
Answer: A
新部署的标准之一是客户要使用AWS Storage Gateway。但是，您不确定应该使用网关缓存的卷还是网关存储的卷，
甚至不确定它们之间的区别。以下哪个陈述最能说明这些差异？
A.网关缓存使您可以将数据存储在Amazon Simple Storage Service（Amazon S3）中并在本地保留经常访问的数据子集的副本。
网关存储使您可以配置本地网关以在本地存储所有数据，然后将此数据的时间点快照异步备份到Amazon S3。 
B.网关缓存是免费的，而网关存储不是免费的。
C.网关缓存的速度比网关存储快10倍。 
D.网关存储使您可以将数据存储在Amazon Simple Storage Service（Amazon S3）中，并在本地保留经常访问的数据子集的副本。
网关缓存使您可以将本地网关配置为在本地存储所有数据，然后将该数据的时间点快照异步备份到Amazon S3。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

A user is launching an EC2 instance in the US East region. Which of the below mentioned
options is recommended by AWS with respect to the selection of the availability zone?
A. Always select the AZ while launching an instance
B. Always select the US-East-1-a zone for HA
C. Do not select the AZ; instead let AWS select the AZ
D. The user can never select the availability zone while launching an instance
Answer: C
用户正在美国东部地区启动EC2实例。关于可用性区域的选择，AWS建议使用以下哪个选项？
A.启动实例时始终选择AZ B.始终为HA 
C选择US-East-1-a区域。而是让AWS选择AZD。用户在启动实例时永远不能选择可用区

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

A company's website runs on Amazon EC2 instances behind an Application Load Balancer
(ALB).
The website has a mix of dynamic and static content Users around the globe are reporting that
the website is slow.
Which set of actions will improve website performance for users worldwide?
A. Create an Amazon CloudFront distribution and configure the ALB as an origin.
Then update the Amazon Route 53 record to point to the CloudFront distribution.
B. Create a latency-based Amazon Route 53 record for the ALB.
Then launch new EC2 instances with larger instance sizes and register the instances with the
ALB.
C. Launch nev. EC2 instances hosting the same web application in different Regions closer to the
users.
Then register the instances with the same ALB using cross-Region VPC peering.
D. Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB
and EC2 instances.
Then update an Amazon Route 53 record to point to the S3 buckets.
Answer: A
公司的网站在Application Load Balancer（ALB）后面的Amazon EC2实例上运行。
该网站混合了动态和静态内容，全球各地的用户都在报告该网站运行缓慢。哪些措施可以改善全球用户的网站性能？ 
A.创建一个Amazon CloudFront发行版并将ALB配置为来源。 然后更新Amazon Route 53记录以指向CloudFront发行版。
B.为ALB创建基于延迟的Amazon Route 53记录。然后启动具有更大实例大小的新EC2实例，并在ALB中注册实例。
C.启动新版本。在距离用户更近的不同区域中托管同一Web应用程序的EC2实例。然后，使用跨区域VPC对等向相同的ALB注册实例。 
D.将网站托管在离用户最近的区域中的Amazon S3存储桶中，并删除ALB和EC2实例。然后更新Amazon Route 53记录以指向S3存储桶。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A company wants to migrate a high performance computing (HPC) application and data from on-
premises to the AWS Cloud.
The company uses tiered storage on premises with hot high-performance parallel storage to
support the application during periodic runs of the application and more economical cold storage
to hold the data when the application is not actively running.
Which combination of solutions should a solutions architect recommend to support the storage
needs of the application? (Select TWO ),
A. Amazon S3 for cold data storage
B. Amazon EFS for cold data storage
C. Amazon S3 for high-performance parallel storage
D. Amazon FSx for Lustre for high-performance parallel storage
E. Amazon FSx for Windows for high-performance parallel storage
Answer: AD
一家公司希望将高性能计算（HPC）应用程序和数据从本地迁移到AWS云。
该公司在具有热的高性能并行存储的前提下使用分层存储，以在应用程序的定期运行期间为应用程序提供支持，
而在应用程序未主动运行时，更经济的冷存储来保存数据。
解决方案架构师应建议哪种解决方案组合来支持应用程序的存储需求？ （选择两个），
A。Amazon S3用于冷数据存储B. Amazon EFS用于冷数据存储
C. Amazon S3用于高性能并行存储D. Amazon FSx用于Lustre用于高性能并行存储
E. Amazon FSx用于Windows高性能并行存储

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company has on-premises servers running a relational database. 
The current database serves high read traffic for users in different locations.
The company wants to migrate to AWS with the least amount of effort.
The database solution should support disaster recovery and not affect the company's current
traffic flow.
Which solution meets these requirements?
A. Use a database in Amazon RDS with Multi-AZ and at least one read replica
B. Use a database in Amazon RDS with Multi-AZ and at least one standby replica
C. Use databases hosted on multiple Amazon EC2 instances in different AWS Regions
D. Use databases hosted on Amazon EC2 instances behind an Application Load Balancer in
different Availability Zones
Answer: A
公司有运行关系数据库的本地服务器。当前数据库为不同位置的用户提供高读取流量。
该公司希望以最少的工作量迁移到AWS。
数据库解决方案应支持灾难恢复，并且不影响公司当前的流量。 哪种解决方案满足这些要求？
A.在具有Multi-AZ和至少一个只读副本的Amazon RDS中使用数据库
B.在具有Multi-AZ和至少一个备用副本的Amazon RDS中使用数据库
C.在不同AWS区域中的多个Amazon EC2实例上托管数据库
D.在不同可用区中的应用程序负载均衡器后面使用Amazon EC2实例上托管的数据库

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A media streaming company collects real-time data and stores it in a disk-optimized database
system.
The company is not getting the expected throughput and wants an in-memory database storage
solution that performs faster and provides high availability using data replication.
Which database should a solutions architect recommend'?
A. Amazon RDS for MySQL
B. Amazon RDS for PostgreSQL
C. Amazon ElastiCache for Redis
D. Amazon ElastiCache for Memcached
Answer; C
一家媒体流传输公司收集实时数据，并将其存储在磁盘优化的数据库系统中。
该公司没有达到预期的吞吐量，而是需要一种内存数据库存储解决方案，该解决方案执行速度更快，并使用数据复制提供高可用性。
解决方案架构师应该建议哪个数据库？
A.MySQL的Amazon RDS B.PostgreSQL的Amazon RDS 
C.Redis的Amazon ElastiCache D.Memcached的Amazon ElastiCache

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A company's application is running on Amazon EC2 instances within an Auto Scaling group
behind an Elastic Load Balancer.
Based on the application's history, the company anticipates a spike in traffic during a holiday
each year.
A solutions architect must design a strategy to ensure that the Auto Scaling group proactively
increases capacity to minimize any performance impact on application users.
Which solution will meet these requirements?
A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization
exceeds 90%
B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected
period of peak demand
C.Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during
the peak demand period
D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when
there are auto scaling EC2_ INSTANCE_ LAUNCH events
Answer: B 
公司的应用程序正在Elastic Load Balancer后面的Auto Scaling组内的Amazon EC2实例上运行。
根据该应用程序的历史记录，该公司预计每年假期期间的流量会激增。解决方案架构师必须设计一种策略，以确保Auto Scaling组能够主动增加容量，以最大程度地降低对应用程序用户的性能影响。哪种解决方案可以满足这些要求？ 
A.在CPU使用率超过90％时创建Amazon CloudWatch警报以扩展EC2实例
B.在预期的峰值需求期之前创建一个定期计划操作以扩展Auto Scaling组
C增大EC2实例的最小和最大数量在高峰需求期间
D中，在Auto Scaling组中进行配置。配置Amazon Simple Notification Service（Amazon SNS）通知以在发生EC2_ INSTANCE_ LAUNCH事件自动缩放时发送警报

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

A company has a two-tier application architecture that runs in public and private subnets Amazon
EC2 instances running the web application are in the public subnet and a database runs on the
private subnet.
The web application instances and the database are running in a single Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this
architecture? (Select TWO.)
A. Create new public and private subnets in the same AZ for high availability
B. Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
C. Add the existing web application instances to an Auto Scaling group behind an Application Load
Balancer
D. Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one
AZ
E. Create new public and private subnets in the same VPC each in a new AZ Migrate the database
to an Amazon RDS multi-AZ deployment
Answer: BE
公司具有在公共子网和私有子网中运行的两层应用程序架构，运行Web应用程序的Amazon EC2实例位于公共子网中，
而数据库在私有子网中运行。 Web应用程序实例和数据库在单个可用区（AZ）中运行。解决方案架构师应采取哪些步骤组合才能为该架构提供高可用性？
（选择两个。）A.在同一可用区中创建新的公共和私有子网以实现高可用性
B.创建跨越多个可用区的Amazon EC2 Auto Scaling组和Application Load Balancer 
C.将现有Web应用程序实例添加到后面的Auto Scaling组中一个应用程序负载平衡器
D.在新的可用区中创建新的公共和私有子网在一个可用区E中使用Amazon EC2创建数据库。在新的可用区中的每个VPC中分别创建新的公共和私有子网将数据库迁移到Amazon RDS multi -AZ部署
Explanation:
You would the EC2 instances to have high availability by placing them in multiple AZs.
不是C，因为您无法将现有实例添加到自动伸缩组。您需要创建启动模板/配置，ASG将从该模板创建实例。 但是您可以做的是从现有EC2实例创建AMI，然后从中创建启动模板/配置。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A financial services company has a web application that serves users in the United States and
Europe.
The application consists of a database tier and a web server tier.
The database tier consists of a MySQL database hosted in us-east-1 Amazon Route 53
geoproximity routing is used to direct traffic to instances in the closest Region.
A performance review of the system reveals that European users are not receiving the same level
of query performance as those in the United States.
Which changes should be made to the database tier to improve performance?
A. Migrate the database to Amazon RDS for MySQL.
Configure Multi-AZ in one of the European Regions.
B. Migrate the database to Amazon DynamoDB.
Use DynamoDB global tables to enable replication to additional Regions.
C. Deploy MySQL instances in each Region.
Deploy an Application Load Balancer in front of MySQL to reduce the load on the primary
instance.
D. Migrate the database to an Amazon Aurora global database in MySQL compatibility mode.
Configure read replicas in one of the European Regions.
Answer: D
一家金融服务公司拥有一个网络应用程序，可为美国和欧洲的用户提供服务。
该应用程序由数据库层和Web服务器层组成。数据库层由us-east-1中托管的MySQL数据库组成。
Amazon Route 53地理邻近路由用于将流量定向到最近的Region中的实例。对该系统的性能检查发现，
欧洲用户所获得的查询性能与美国用户不同。应该对数据库层进行哪些更改以提高性能？ 
A.将数据库迁移到Amazon RDS for MySQL。在欧洲地区之一中配置多可用区。 
B.将数据库迁移到Amazon DynamoDB。使用DynamoDB全局表来启用复制到其他区域的功能。 
C.在每个区域中部署MySQL实例。在MySQL前面部署应用程序负载平衡器，以减少主实例上的负载。
D.以MySQL兼容模式将数据库迁移到Amazon Aurora全局数据库。在欧洲地区之一中配置只读副本

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A solutions architect is tasked with transferring 750 TB of data from a network-attached file
system located at a branch office to Amazon S3 Glacier.
The solution must avoid saturating the branch office's low-bandwidth internet connection.
What is the MOST cost-effective solution1?
A. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly.
Create a bucket policy to enforce a VPC endpoint.
B. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination.
Create a bucket policy to enforce a VPC endpoint.
C. Mount the network-attached file system to Amazon S3 and copy the files directly.
Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
D. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination.
Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
Answer: D
解决方案架构师的任务是将750 TB的数据从分支机构的网络连接文件系统传输到Amazon S3 Glacier。
解决方案必须避免使分支机构的低带宽Internet连接饱和。什么是最具成本效益的解决方案1？
A.创建到Amazon S3存储桶的站点到站点VPN隧道，然后直接传输文件。创建存储桶策略以强制执行VPC端点。 
B.订购10台AWS Snowball设备，然后选择一个S3 Glacier保管库作为目的地。创建存储桶策略以强制执行VPC端点。 
C.将网络连接的文件系统安装到Amazon S3并直接复制文件。创建生命周期策略以将S3对象过渡到Amazon S3 Glacier。
D.订购10台AWS Snowball设备，然后选择一个Amazon S3存储桶作为目的地。创建生命周期策略以将S3对象过渡到Amazon S3 Glacier。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A company's production application runs online transaction processing (OLTP) transactions on an
Amazon RDS MySQL DB instance.
The company is launching a new reporting tool that will access the same data.
The reporting tool must be highly available and not impact the performance of the production
application
How can this be achieved'?
A. Create hourly snapshots of the production RDS DB instance.
B. Create a Multi-AZ RDS Read Replica of the production RDS DB instance.
C. Create multiple RDS Read Replicas of the production RDS DB instance.
Place the Read Replicas in an Auto Scaling group.
D. Create a Single-AZ RDS Read Replica of the production RDS DB instance.
Create a second Single-AZ RDS Read Replica from the replica.
Answer: B
公司的生产应用程序在Amazon RDS MySQL数据库实例上运行在线事务处理（OLTP）事务。该公司正在启动一种新的报告工具，该工具将访问相同的数据。报告工具必须具有高可用性，并且不影响生产应用程序的性能。如何实现？ A.创建生产RDS数据库实例的每小时快照。 B.创建生产RDS数据库实例的多可用区RDS只读副本。 C.创建生产RDS数据库实例的多个RDS只读副本。将只读副本放置在Auto Scaling组中。 D.创建生产RDS数据库实例的单可用区RDS只读副本。从副本创建第二个单可用区RDS只读副本

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company allows its developers to attach existing IAM policies to existing IAM roles to enable
faster experimentation and agility.
However the security operations team is concerned that the developers could attach the existing
administrator policy, which would allow the developers to circumvent any other security policies.
How should a solutions architect address this issue?
A. Create an Amazon SNS topic to send an alert every time a developer creates a new policy
B. Use service control policies to disable IAM activity across all accounts in the organizational unit
C. Prevent the developers from attaching any policies and assign all IAM duties to the security
operations team
D. Set an IAM permissions boundary on the developer IAM role that explicitly denies attaching the
administrator policy
Answer: D
公司允许其开发人员将现有IAM策略附加到现有IAM角色，以实现更快的实验和敏捷性。
但是，安全运营团队担心开发人员可以附加现有的管理员策略，这将使开发人员可以规避其他任何安全策略。
解决方案架构师应如何解决此问题？ 
A.创建一个Amazon SNS主题，以在开发人员每次创建新策略时发送警报
B.使用服务控制策略来禁用组织单位中所有帐户的IAM活动
C.防止开发人员附加任何策略并分配所有IAM职责给安全操作团队
D。在开发人员IAM角色上设置一个IAM权限边界，该边界明确拒绝附加管理员策略

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

A user is storing a large number of objects on AWS S3. The user wants to implement the search
functionality among the objects. How can the user achieve this?
A. Use the indexing feature of S3.
B. Tag the objects with the metadata to search on that.
c. Use the query functionality of S3.
D. Make your own DB system which stores the S3 metadata for the search functionality.
Answer: D
用户正在AWS S3上存储大量对象。用户想要在对象之间实现搜索功能。
用户如何实现呢？答：使用S3的索引功能。 B.用元数据标记对象以进行搜索。 
C。使用S3的查询功能。 D.制作自己的数据库系统，该系统存储用于搜索功能的S3元数据

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

After setting up a Virtual Private Cloud (VPC) network, a more experienced cloud engineer
suggests that to achieve low network latency and high network throughput you should look into
setting up a placement group. You know nothing about this, but begin to do some research about
it and are especially curious about its limitations. Which of the below statements is wrong in
describing the limitations of a placement group?
A. Although launching multiple instance types into a placement group is possible, this reduces the
likelihood that the required capacity will be available for your launch to succeed.
B. A placement group can span multiple Availability Zones.
C. You can't move an existing instance into a placement group.
D. A placement group can span peered VPCs
Answer: B
设置了虚拟私有云（VPC）网络后，一位经验更为丰富的云工程师建议，要实现低网络延迟和高网络吞吐量，
您应该考虑设置一个展示位置组。您对此一无所知，但开始对其进行一些研究，
并对它的局限性特别好奇。在描述展示位置组的局限性时，以下哪种说法是错误的？答：
尽管可以将多个实例类型启动到放置组中，但是这降低了成功启动所需容量所需的可能性。
B.放置组可以跨越多个可用区。 C.您不能将现有实例移动到展示位置组中。 
D.展示位置组可以跨越对等VPC

1
2
3
4
5
6
7
8

What is a placement group in Amazon EC2?
A. It is a group of EC2 instances within a single Availability Zone.
B. It the edge location of your web content.
C. It is the AWS region where you run the EC2 instance of your web content.
D. It is a group used to span multiple Availability Zones.
Answer: A
Amazon EC2中的展示位置组是什么？答：它是单个可用区内的一组EC2实例。
B.它是您的Web内容的边缘位置。 C.在AWS区域中运行Web内容的EC2实例。 D.这是一个用于跨越多个可用区的组

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

You are migrating an internal server on your DC to an EC2 instance with EBS volume. Your
server disk usage is around 500GB so you just copied all your data to a 2TB disk to be used with
AWS Import/Export. Where will the data be imported once it arrives at Amazon?
A. toa 2TB EBS volume
B. to an S3 bucket with 2 objects of 1TB
C. to an 500GB EBS volume
D. to an S3 bucket as a 2TB snapshot
Answer: B
您正在将DC上的内部服务器迁移到具有EBS卷的EC2实例。服务器磁盘使用量约为500GB，
因此您仅将所有数据复制到2TB磁盘上即可与AWS Import / Export结合使用。数据到达亚马逊后将被导入哪里？
A.将2TB EBS卷B.到2个1TB对象的S3存储桶C.将500GB EBS卷D.作为2TB快照复制到S3存储桶

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A client needs you to import some existing infrastructure from a dedicated hosting provider to
AWS to try and save on the cost of running his current website. He also needs an automated
process that manages backups, software patching, automatic failure detection, and recovery. You
are aware that his existing set up currently uses an Oracle database. Which of the following AWS
databases would be best for accomplishing this task?
A. Amazon RDS
B. Amazon Redshift
C. Amazon SimpleDB
D. Amazon ElastiCache
Answer: A
客户端需要您将一些现有的基础架构从专用托管提供商导入到AWS，以尝试并节省运行其当前网站的成本。
他还需要一个自动过程来管理备份，软件修补，自动故障检测和恢复。
您知道他的现有设置当前使用Oracle数据库。以下哪个AWS数据库最适合完成此任务？ 
A.Amazon RDS B.Amazon Redshift C.Amazon SimpleDB D.Amazon ElastiCache

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability
Zones.
A. This is true only if requested during the set-up of VPC.
B. This is true.
C. This is false.
D. This is true only for US regions.
Answer: C
是非题：VPC包含多个子网，其中每个子网可以跨越多个可用区。
答：只有在设置VPC期间提出要求时，这才是正确的。 B.是真的。 
C.这是错误的。 D.这仅适用于美国地区

1
2
3
4
5
6
7
8
9

An edge location refers to which, Amazon Web Service?
A. An edge location is refered to the network configured within a Zone or Region
B. An edge location is an AWS Region
C. An edge location is the location of the data center used for Amazon CloudFront.
D. An edge location is a Zone within an AWS Region
Answer: C
边缘位置指的是哪个Amazon Web Service？
A.边缘位置是指在区域或区域B中配置的网络。边缘位置是AWS区域
C。边缘位置是用于Amazon CloudFront的数据中心的位置。 D.边缘位置是AWS区域内的区域

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

You are looking at ways to improve some existing infrastructure as it seems a lot of engineering
resources are being taken up with basic management and monitoring tasks and the costs seem
to be excessive. You are thinking of deploying Amazon ElasticCache to help. Which of the
following statements is true in regards to ElasticCache?
A. You can improve load and response times to user actions and queries however the cost
associated with scaling web applications will be more.
B. You can't improve load and response times to user actions and queries but you can reduce the
cost associated with scaling web applications.
You can improve load and response times to user actions and queries however the cost
associated with scaling web applications will remain the same.
D. You can improve load and response times to user actions and queries and also reduce the cost
associated with scaling web applications.
Answer: D
您正在寻找改善现有基础架构的方法，因为基本的管理和监视任务似乎占用了大量工程资源，而且成本似乎过高。
您正在考虑部署Amazon ElasticCache来提供帮助。关于ElasticCache，以下哪个陈述是正确的？
答：您可以改善对用户操作和查询的负载和响应时间，但是与扩展Web应用程序相关的成本会更高。 
B.您无法改善对用户操作和查询的负载和响应时间，但可以减少与扩展Web应用程序相关的成本。
您可以改善对用户操作和查询的负载和响应时间，但是与扩展Web应用程序相关的成本将保持不变。
D.您可以改善对用户操作和查询的负载和响应时间，还可以减少与扩展Web应用程序相关的成本。

1
2
3
4
5
6
7
8
9

Do Amazon EBS volumes persist independently from the running life of an Amazon EC2
instance?
A. Yes, they do but only if they are detached from the instance.
B. No, you cannot attach EBS volumes to an instance.
C. No, they are dependent.
D. Yes, they do.
Answer: D
Amazon EBS卷是否独立于Amazon EC2实例的运行寿命而持久存在？
答：是的，但只有在与实例分离时才这样做。 B.不能，您不能将EBS卷附加到实例。 C.不，他们是依赖的。 D.是的，他们有

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

Your supervisor has asked you to build a simple file synchronization service for your department.
He doesn't want to spend too much money and he wants to be notified of any changes to files by
email. What do you think would be the best Amazon service to use for the email solution?
A. Amazon SES
B. Amazon CloudSearch
C. Amazon SWF
D. Amazon AppStream
Answer: A
您的主管要求您为部门建立一个简单的文件同步服务。他不想花太多钱，而且想通过电子邮件将文件更改通知他。
您认为将哪种最佳的Amazon服务用于电子邮件解决方案？

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A product team is creating a new application that will store a large amount of data.
The data will be analyzed hourly and modified by multiple Amazon EC2 Linux instances.
The application team believes the amount of space needed will continue to grow for the next 6
months.
Which set of actions should a solutions architect take to support these needs'?

A. Store the data in an Amazon EBS volume.
Mount the EBS volume on the application instances
B. Store the data in an Amazon EFS file system.
Mount the file system on the application instances.
C. Store the data in Amazon S3 Glacier.
Update the vault policy to allow access to the application instances.
D. Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-lA).
Update the bucket policy to allow access to the application instances.
Answer: B
产品团队正在创建一个新应用程序，该应用程序将存储大量数据。数据将每小时进行分析，
并由多个Amazon EC2 Linux实例进行修改。应用程序团队认为，所需的空间量将在未来6个月内继续增长。
解决方案架构师应采取哪些行动来满足这些需求？ 
A.将数据存储在Amazon EBS卷中。在应用程序实例
B上安装EBS卷。将数据存储在Amazon EFS文件系统中。在应用程序实例上挂载文件系统。
C.将数据存储在Amazon S3 Glacier中。更新库策略以允许访问应用程序实例。
D.将数据存储在Amazon S3 Standard-Infrequent Access（S3 Standard-IA）中。更新存储桶策略以允许访问应用程序实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

A gaming company has multiple Amazon EC2 instances in a single Availability Zone for its
multiplayer game that communicates with users on Layer 4.
The chief technology officer (CTo) wants to make the architecture highly available and cost-
effective.
What should a solutions architect do to meet these requirements? (Select TWO.)
A. Increase the number of EC2 instances.
B. Decrease the number of EC2 instances
C. Configure a Network Load Balancer in front of the EC2 instances.
D. Configure an Application Load Balancer in front of the EC2 instances
E. Configure an Auto Scaling group to add or remove instances in multiple Availability Zones
automatically.
Answer: CE
一家游戏公司的单个多人游戏在一个可用区中具有多个Amazon EC2实例，该实例与第4层上的用户进行通信。
首席技术官（CTo）希望使该架构高度可用且具有成本效益。解决方案架构师应该怎么做才能满足这些要求？ 
（选择两个。）A.增加EC2实例的数量。 B.减少EC2实例的数量
C.在EC2实例的前面配置网络负载平衡器。 
D.在EC2实例之前配置应用程序负载平衡器
E.配置一个Auto Scaling组以自动在多个可用区中添加或删除实例。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A company hosts an application on multiple Amazon EC2 instances.
The application processes messages from an Amazon SQS queue writes to an Amazon RDS
table and deletes the message from the queue Occasional duplicate records are found in the
RDS table.
The SQS queue does not contain any duplicate messages.
What should a solutions archived do to ensure messages are being processed once only?
A. Use the CreateQueue API call to create a new queue
B. Use the AddPermission API call to add appropriate permissions
C. Use the ReceiveMessage API call to set an appropriate wait time.
D. Use the ChangeMessageVisibility API call to increase the visibility timeout
Answer: D
一家公司在多个Amazon EC2实例上托管应用程序。该应用程序处理来自Amazon SQS队列写入Amazon RDS表的消息，
并从队列中删除该消息偶尔在RDS表中找到重复记录。 SQS队列不包含任何重复的消息。
归档的解决方案应该做什么以确保仅处理一次消息？
A.使用CreateQueue API调用创建新队列B.使用AddPermission API调用添加适当的权限
C.使用ReceiveMessage API调用设置适当的等待时间。 D.使用ChangeMessageVisibility API调用来增加可见性超时

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A solutions architect is designing an application for a two-step order process.
The first step is synchronous and must return to the user with ittle latency.
The second step takes longer, so it will be implemented in a separate component Orders must be
processed exactly once and in the order in which they are received.
How should the solutions architect integrate these components?
A. Use Amazon SQS FIFO queues.
B. Use an AWS Lambda function along with Amazon SQS standard queues
C. Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic
D. Create an SNS topic and subscribe an Amazon SQS Standard queue to that topic.
Answer: A
解决方案架构师正在为两步定购流程设计应用程序。第一步是同步的，必须以微弱的延迟返回给用户。
第二步需要花费更长的时间，因此将在单独的组件中实施。必须按接收到的顺序准确地处理一次订单。
解决方案架构师应如何集成这些组件？
A.使用Amazon SQS FIFO队列。 B.将AWS Lambda函数与Amazon SQS标准队列一起使用
C.创建SNS主题并将Amazon SQS FIFO队列订阅该主题D.创建SNS主题并将Amazon SQS Standard队列订阅该主题

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A solutions architect is designing a high performance computing (HPC) workload on Amazon
EC2.
The EC2 instances need to communicate to each other frequently and require network
performance with low latency and high throughput.
Which EC2 configuration meets these requirements?
A. Launch the EC2 instances in a cluster placement group in one Availability Zone
B. Launch the EC2 instances in a spread placement group in one Availability Zone
C. Launch the EC2 instances in an Auto Scaling group in two Regions and peer the VPCs
D. Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones
Answer: A
决方案架构师正在Amazon EC2上设计高性能计算（HPC）工作负载。 EC2实例需要经常相互通信，并需要低延迟和高吞吐量的网络性能。
哪种EC2配置符合这些要求？ 
A.在一个可用区B中的群集放置组中启动EC2实例。
在一个可用区C中的扩展放置组中启动EC2实例。
在两个区域中的Auto Scaling组中启动EC2实例并与VPC 
D对等。在跨越多个可用区的Auto Scaling组中启动EC2实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A company is planning to use Amazon S3 lo store images uploaded by its users.
The images must be encrypted at rest in Amazon S3.
The company does not want to spend time managing and rotating the keys, but it does want to
control who can access those keys.
What should a solutions architect use to accomplish this?
A. Server-Side Encryption with keys stored in an S3 bucket
B. Server-Side Encryption with Customer-Provided Keys (SSE-C)
C. Server- Side Encryption with Amazon S3-Managed Keys (SSE-S3)
D. Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)
Answer: D
一家公司计划使用其用户上传的Amazon S3 lo存储图像。图像必须在Amazon S3中静态加密。
该公司不想花费时间来管理和旋转密钥，但是它希望控制谁可以访问这些密钥。解决方案架构师应使用什么来完成此任务？ 
A.使用存储在S3存储桶中的密钥进行服务器端加密B.使用客户提供的密钥进行服务器端加密（SSE-C）
C.使用Amazon S3管理的密钥进行服务器端加密（SSE-S3）D.使用AWS KMS托管密钥（SSE-KMS）进行侧面加密

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

An Amazon EC2 administrator created the following policy associated with an IAM group
containing several users.
"Version": "2012-10-17",
"Statement": [
"Effect": "Allow" ,
"Action": "ec2 :Te rminateInstances" ,
"Resources": "*",
"Condition": (
"IpAddress": 
"aws:SourceIp": "10.100.100.0/24"
)
]
],*

*
"Effect": "Deny" ,
"Action": "ec2:*",
"Resources" :
"Condition":
(
"StringNotEquals": (
"ec2:Region": "us-east-1"

 What is the effect of this policy?
 A. Users can terminate an EC2 instance in any AWS Region except us-east-1.
 B. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region 
C. Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is10.100.100.254.
 D. Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is10.100.100.254.
Answer: C
这项政策有什么作用？ 答：A用户可以终止除us-east-1之外的任何AWS区域中的EC2实例。
B.用户可以终止IP地址为10.100的EC2实例。美国东部1地区1001 
C.当用户的源IP为10.100.100.254时，用户可以在us-east-1区域终止EC2实例。
D.当用户的源IP为10.100.100.254时，用户无法在us-east-1区域中终止EC2实例。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A company is running an ecommerce application on Amazon EC2.
The application consists of a stateless web tier that requires a minimum of 10 instances, and a
peak of 250 instances to support the application's usage,
The application requires 50 instances 80% of the time.
Which solution should be used to minimize costs?
A. Purchase Reserved Instances to cover 250 instances
B. Purchase Reserved Instances to cover 80 instances.
Use Spot Instances to cover the remaining instances
C. Purchase On-Demand Instances to cover 40 instances.
Use Spot Instances to cover the remaining instances
D. Purchase Reserved Instances to cover 50 instances.
Use On-Demand and Spot Instances to cover the remaining instances
Answer: D
一家公司正在Amazon EC2上运行电子商务应用程序。该应用程序由一个无状态Web层组成，
该层至少需要10个实例，并且最多需要250个实例来支持该应用程序的使用。该应用程序在80％的时间内需要50个实例。
应该使用哪种解决方案以最小化成本？
A.购买保留实例以覆盖250个实例
B.购买保留实例以覆盖80个实例。使用竞价型实例覆盖其余实例
C.按需购买实例来覆盖40个实例。使用竞价型实例覆盖其余实例
D.购买预留实例以覆盖50个实例。使用按需实例和竞价型实例覆盖其余实例

1
2
3
4
5
6
7

Does DynamoDB support in-place atomic updates?
A. Yes
B. No
C. It does support in-place non-atomic updates
D. It is not defined
Answer: A
DynamoDB是否支持就地原子更新？ A.是B.否C.它确实支持就地非原子更新D.未定义

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

Your manager has just given you access to multiple VPN connections that someone else has recently set up between all your company's offices. She needs you to make sure that the
communication between the VPNs is secure. Which of the following services would be best for
providing a low-cost hub-and-spoke model for primary ör backup connectivity between these
remote offices?
A. Amazon CloudFront
B. AWS Direct Connect
C. AWS CloudHSM
D. AWS VPN CloudHub
Answer: D
您的经理刚刚授予您访问其他人最近在公司所有办公室之间建立的多个VPN连接的权限。
她需要您确保VPN之间的通信是安全的。
以下哪项服务最适合为这些远程办公室之间的主要备份连接提供低成本的中心辐射型模型？
A.Amazon CloudFront B.AWS Direct Connect C.AWS CloudHSM D.AWS VPN CloudHub

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

Amazon EC2 provides a_ . It is an HTTP or HTTPS request that uses the HTTP verbs GET or POST. 
A.
web database
в.
.net framework
C.
Query API
D
C library
Answer: C
Explanation:
Amazon EC2 provides a Query ÀPI. These requests are HTTP or HTTPS requests that use the
HTTP verbs GET or POST and a Query parameter named Action.
Reference: http://docs.aws.amazon.comAWSEC2/latestAPlReference/making-api-requests.html

1
2
3
4
5
6
7
8
9

In Amazon AWS, which of the following statements is true of key pairs?
A. Key pairs are used only for Amazon SDKs.
B. Key pairs are used only for Amazon EC2 and Amazon CloudFront,
C. Key pairs are used only for Elastic Load Balancing and AWS IAM.
D. Key pairs are used for all Amazon services.
Answer: B
在Amazon AWS中，以下哪个语句对密钥对是正确的？
答：密钥对仅用于Amazon SDK。 B.密钥对仅用于Amazon EC2和Amazon CloudFront，
C.密钥对仅用于Elastic Load Balancing和AWS IAM。 D.密钥对用于所有Amazon服务

1
2
3
4
5
6
7
8
9

Does Amazon DynamoDB support both increment and decrement atomic operations?
A. Only increment, since decrement are inherently impossible with DynamoDB's data model.
B. No, neither increment nor decrement operations.
C. Yes, both increment and decrement operations.
D. Only decrement, since increment are inherently impossible with DynamoDB's data model.
Answer: C
Amazon DynamoDB是否同时支持递增和递减原子操作？
A.仅增量，因为DynamoDB的数据模型本来就不可能减小。 B.不，既不递增也不递减操作。
C.是的，增量和减量操作都可以。 D.仅减少，因为DynamoDB的数据模型本来就不可能增加。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

An organization has three separate AWS accounts, one each for development, testing, and
production. The organization wants the testing team to have access to certain AWS resources in
the production account. How can the organization achieve this?
A. Itis not possible to access resources of one account with another account.
B. Create the IAM roles with cross account access.
C. Create the IAM user in a test account, and allow it access to the production environment with the
IAM policy.
D. Create the IAM users with cross account access.
Answer: B
一个组织拥有三个独立的AWS账户，每个账户分别用于开发，测试和生产。
组织希望测试团队可以访问生产帐户中的某些AWS资源。组织如何实现这一目标？
答：不能访问另一个帐户的一个帐户的资源。 B.创建具有跨帐户访问权限的IAM角色。
C.在测试帐户中创建IAM用户，并允许其使用IAM策略访问生产环境。 D.创建具有交叉帐户访问权限的IAM用户

1
2
3
4
5
6
7
8
9

You need to import several hundred megabytes of data from a local Oracle database to an
Amazon RDS DB instance. What does AWS recommend you use to accomplish this?
A. Oracle export/import utilities
B. Oracle SQL Developer
C. Oracle Data Pump
D. DBMS_ FILE_ TRANSFER
Answer: C
您需要将数百兆字节的数据从本地Oracle数据库导入到Amazon RDS数据库实例。 AWS建议您使用什么来完成此任务？ 
A. Oracle导出/导入实用程序B. Oracle SQL Developer C. Oracle数据泵D. DBMS_ FILE_ TRANSFER

1
2
3
4
5
6
7
8
9

A user has created an EBS volume with 1000 lOPS. What is the average lOPS that the user will
get for most of the year as per EC2 SLA if the instance is attached to the EBS optimized
instance?
A.950
B. 990
C, 1000
D.900
Answer: D
用户创建了一个具有1000 lOPS的EBS卷。如果将实例附加到EBS优化实例，则根据EC2 SLA，用户一年中大部分时间将获得的平均lOPS是多少？

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

You need to migrate a large amount of data into the cloud that 'you have stored on a hard disk
and you decide that the best way to accomplish this is with AWS Import/Export and you mail the
hard disk to AWS. Which of the following statements 'is incorrect in regards to AWS
Import/Export?
A. It can export from Amazon S3
B. It can Import to Amazon Glacier
C. It can export from Amazon Glacier.
D. It can Import to Amazon EBS
Answer: C
您需要将存储在硬盘上的大量数据迁移到云中，然后确定实现此目标的最佳方法是使用AWS Import / Export，
然后将硬盘邮寄到AWS。关于AWS Import / Export，以下哪个陈述不正确？ 
A.可以从Amazon S3导出B。可以导入到Amazon Glacier
C。可以从Amazon Glacier导出。 D.它可以导入到Amazon EBS

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

You are in the process of creating a Route 53 DNS failover to direct traffic to two EC2 zones.
Obviously, if one fails, you would like Route 53 to direct traffic to the other region, Each region
has an ELB with some instances being distributed. What is the best way for you to configure the
Route 53 health check?
A. Route 53 doesn't support ELB with an internal health check.You need to create your own Route
53 health check of the ELB
B. Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" off
and "Associate with Health Check" on and R53 will use the ELB's internal health check.
C. Route 53 doesn't support EL B with an internal health check. You need to associate your resource
record set for the ELB with your own health check
D. Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" on
and "Associate with Health Check" off and R53 will use the ELB's internal health check.
Answer: D
您正在创建Route 53 DNS故障转移，以将流量定向到两个EC2区域。
显然，如果一个失败，您希望Route 53将流量引导到另一个区域，每个区域都有一个ELB，
其中分布了一些实例。什么是配置Route 53健康检查的最佳方法？
答：Route 53不支持带有内部运行状况检查的ELB。您需要创建自己的ELB的Route 53运行状况检查。
B. Route 53本机支持带有内部运行状况检查的ELB。关闭“评估目标健康”并打开“与健康检查关联”，R53将使用ELB的内部健康检查。 
C. Route 53不支持带有内部健康检查的ELB。您需要将ELB的资源记录集与您自己的运行状况检查
D相关联。Route 53本机支持ELB进行内部运行状况检查。打开“评估目标健康”并关闭“与健康检查关联”，R53将使用ELB的内部健康检查

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A user wants to use an EBS-backed Amazon EC2 instance for a temporary job. Based on the
input data, the job is most likely to finish within a week. Which of the following steps should be
followed to terminate the instance automatically once the job is finished?
A. Configure the EC2 instance with a stop instance to terminate it.
B. Configure the EC2 instance with ELB to terminate the instance when it remains idle.
C.Configure the CloudWatch alarm on the instance that should perform the termination action once
the instance is idle.
D. Configure the Auto Scaling schedule activity that terminates the instance after 7 days.

Answer: C
用户希望将EBS支持的Amazon EC2实例用于临时作业。 根据输入的数据，该工作最有可能在一周之内完成。 
作业完成后，应遵循以下哪些步骤自动终止实例？ 
A.使用停止实例配置EC2实例以终止它。 B.用ELB配置EC2实例，使其在空闲时终止该实例。 在实例闲置后，在应执行终止操作的实例上配置CloudWatch警报。
D.配置Auto Scaling计划活动，该活动将在7天后终止实例。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

Which of the following is true of Amazon EC2 security group?
A. You can modify the outbound rules for EC2-Classic.
B. You can modify the rules for a security group only if the security group controls the traffic for just
one instance.
C. You can modify the rules for a security group only when a new instance is created.
D. You can modify the rules for a security group at any time.
Answer: D
Amazon EC2安全组符合以下哪个条件？
答：您可以修改EC2-Classic的出站规则。 B.仅当安全组仅控制一个实例的流量时，才可以修改安全组的规则。 
C.您只​​能在创建新实例时修改安全组的规则。 D.您可以随时修改安全组的规则

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

An Elastic IP address (EIP) is a static P address designed for dynamic cloud computing. With an
EIP, you can mask the failure of an instance or software by rapidly remapping the address to
another instance in your account. Your EIP is associated with your AWS account, not a particular
EC2 instance, and it remains associated with your account until you choose to explicitly release it.
By default how many ElPs is each AWS account limited to on a per region basis?

A. 1
B. 5
C. Unlimited
D. 10
Answer: B
弹性IP地址（EIP）是为动态云计算设计的静态P地址。使用EIP，
您可以通过将地址快速重新映射到帐户中的另一个实例来掩盖实例或软件的故障。您的EIP与您的AWS账户（而不是特定的EC2实例）关联
，并且在您选择明确释放它之前，它仍与您的账户关联。默认情况下，每个AWS帐户在每个区域中限制为多少ElP？

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database.
When evaluating performance metrics, a solutions architect discovered that the database reads
are causing high I/O and adding latency to the write requests against the database,
What should the solutions architect do to separate the read requests from the write requests?
A. Enable read-through caching on the Amazon Aurora database
B. Update the application to read from the Multi-AZ standby instance
C. Create a read replica and modify the application to use the appropriate endpoint
D. Create a second Amazon Aurora database and link it to the primary database as a read replica.
Answer: C
在AWS上运行的应用程序对其数据库使用Amazon Aurora多可用区部署。
在评估性能指标时，解决方案架构师发现数据库读取了
导致高I / O，并增加了针对数据库的写入请求的延迟，
解决方案架构师应该怎么做才能将读取请求与写入请求分开？
A.在Amazon Aurora数据库上启用通读缓存
B.更新应用程序以从多可用区备用实例读取
C.创建一个只读副本并修改应用程序以使用适当的端点
D.创建第二个Amazon Aurora数据库并将其作为只读副本链接到主数据库。
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

An application runs on Amazon EC2 instances acroรs multiple Availability Zones.
The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer.
The application performs best when the CPU utilization of the EC2 instances is at or near 40%.
What should a solutions architect do to maintain the desired performance across all instances m
the group?
A. Use a simple scaling policy to dynamically scale the Auto Scaling group
B. Use a target tracking policy to dynamically scale the Auto Scaling group
C. Use an AWS Lambda function to update the desired Auto Scaling group capacity
D. Use scheduled scaling actions to scale up and scale down the Auto Scaling group
Answer: B
一个应用程序在Amazon EC2实例上运行，并具有多个可用区。
实例在Application Load Balancer后面的Amazon EC2 Auto Scaling组中运行。当EC2实例的CPU利用率达到或接近40％时，
该应用程序的性能最佳。解决方案架构师应如何在小组中的所有实例上保持期望的性能？
A.使用简单的扩展策略动态扩展Auto Scaling组B.使用目标跟踪策略动态扩展Auto Scaling组
C.使用AWS Lambda函数更新所需的Auto Scaling组容量D.使用计划的扩展操作来放大和缩小Auto Scaling组

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

A company runs a multi-tier web application that hosts news content.
The application runs on Amazon EC2 instances behind an Application Load Balancer.
The instances run in an EC2 Auto Scaling group across multiple Availability Zones and use an
Amazon Aurora database.
A solutions architect needs to make the application more resilient to periodic increases in request
rates.
Which architecture should the solutions architect implement? (Select TWO )
A. Add AWS Shield.
B. Add Aurora Replicas
C. Add AWS Direct Connect
D. Add AWS Global Accelerator.
E. Add an Amazon CloudFront distribution in front of the Application Load Balancer
Answer: BE
公司运行承载新闻内容的多层Web应用程序。该应用程序在Application Load Balancer后面的Amazon EC2实例上运行。
实例在多个可用区中的EC2 Auto Scaling组中运行，并使用Amazon Aurora数据库。解决方案架构师需要使应用程序更具弹性，
以应对请求率的定期增加。解决方案架构师应采用哪种架构？ （选择两个）
A.添加AWS Shield。 B.添加Aurora副本C.添加AWS Direct Connect 
D.添加AWS Global Accelerator。 E.在Application Load Balancer前面添加Amazon CloudFront分配

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

A solutions architect is optimizing a website for an upcoming musical event Videos of the
performances will be streamed in real time and then will be available on demand.
The event is expected to attract a global online audience.
Which service will improve the performance of both the real-time and on-demand streaming?
A. Amazon CloudFront
B. AWS Global Accelerator
C. Amazon Route 53
D. Amazon S3 Transfer Acceleration
Answer: A
解决方案架构师正在针对即将举行的音乐活动优化网站，将实时播放表演视频，然后按需提供。该活动有望吸引全球在线观众。
哪种服务将同时改善实时流和点播流的性能？ 
A.Amazon CloudFront B.AWS Global Accelerator C.Amazon Route 53 D.Amazon S3传输加速

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A company serves content to its subscribers across the world using an application running on
AWS.
The application has several Amazon EC2 'instances in a private subnet behind an Application
Load Balancer (ALB).
Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block
access for certain countries.
Which action will meet these requirements?
A. Modify the ALB security group to deny incoming traffic from blocked countries
B. Modify the security group for EC2 instances to deny incoming traffic from blocked countries
C. Use Amazon CloudFront to serve the application and deny access to blocked countries
D. Use ALB listener rules to return access denied responses to incoming traffic from blocked
countries
Answer: C
一家公司使用在AWS上运行的应用程序向其全球的订户提供内容。该应用程序在应用程序负载平衡器（ALB）后的专用子网中具有多个Amazon EC2'实例。由于版权限制的最新变化，首席信息官（CIO）希望阻止某些国家/地区的访问。哪些动作可以满足这些要求？ A.修改ALB安全组以拒绝来自阻止国家的传入流量修改EC2实例的安全组以拒绝来自阻止国家的传入流量C.使用Amazon CloudFront服务该应用程序并拒绝对阻止国家的访问D.使用ALB侦听器规则返回访问被拒绝对来自阻止国家的传入流量的响应

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

A manufacturing company wants to implement predictive maintenance on its machinery
equipment.
The company will install thousands of loT sensors that will send data to AWS in real time.
A solutions architect is tasked with implementing a solution that will receive events in an ordered
manner for each machinery asset and ensure that data is saved for further processing at a later
time.
Which solution would be MOST efficient?
A. Use Amazon Kinesis Data Streams for real-time events with a partition for each equipment asset.
Use Amazon Kinesis Data Firehose to save data to Amazon S3.
B. Use Amazon Kinesis Data Streams for real-time events with a shard for each equipment asset.
Use Amazon Kinesis Data Firehose to save data to Amazon EBS .
C. Use an Amazon SQS FIFO queue for real-time events with one queue for each equipment asset.
Trigger an AWS Lambda function for the SQS queue to save data to Amazon EFS.
D. Use an Amazon SQS standard queue for real-time events with one queue for each equipment
asset.
Trigger an AWS Lambda function from the SQS queue to save data to Amazon S3.
Answer: A
一家制造公司希望对其机械设备实施预测性维护。该公司将安装数千个loT传感器，这些传感器会实时将数据发送到AWS。解决方案架构师的任务是实施一种解决方案，该解决方案将按顺序接收每个机械资产的事件，并确保保存数据以供以后进行进一步处理。哪种解决方案最有效？ A.使用Amazon Kinesis Data Streams进行实时事件，并为每个设备资产分配一个分区。使用Amazon Kinesis Data Firehose将数据保存到Amazon S3。 B.使用Amazon Kinesis Data Streams实时事件，并为每个设备资产分配一个碎片。使用Amazon Kinesis Data Firehose将数据保存到Amazon EBS。 C.将Amazon SQS FIFO队列用于实时事件，每个设备资产都有一个队列。触发SQS队列的AWS Lambda函数，以将数据保存到Amazon EFS。 D.使用Amazon SQS标准队列处理实时事件，每个设备资产使用一个队列。从SQS队列触发AWS Lambda函数以将数据保存到Amazon S3。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

A company has deployed an API in a VPC behind an internet-facing Application Load Balancer
(ALB).
An application that consumes the API as a client is deployed in a second account in private
subnets behind a NAT gateway.
When requests to the client application increase, the NAT gateway costs are higher than
expected.
A solutions architect has configured the ALB to be internal.
Which combination of architectural changes will reduce the NAT gateway costs'? (Select TWO )
一家公司已在面向互联网的应用程序负载均衡器后面的VPC中部署了API
（ALB）。
客户端使用API的应用程序部署在私有的第二个帐户中
NAT网关后面的子网。
当对客户端应用程序的请求增加时，NAT网关成本将高于
预期。
解决方案架构师已将ALB配置为内部的。
哪种架构更改组合可以降低NAT网关的成本？ （选择两个）
A. Configure a VPC peering connection between the two VPCs.
Access the API using the private address
B. Configure an AWS Direct Connect connection between the two VPCs.
Access the API using the private address.
C. Configure a ClassicLink connection for the API into the client VPC.
Access the API using the ClassicLink address.
D. Configure a PrivateLink connection for the API into the client VPC,
Access the API using the PrivateLink address.
E. Configure an AWS Resource Access Manager connection between the two accounts.
Access the API using the private address
A.在两个VPC之间配置VPC对等连接。
使用私有地址访问API
B.在两个VPC之间配置一个AWS Direct Connect连接。
使用私有地址访问API。
C.为该API配置到客户端VPC的ClassicLink连接。
使用ClassicLink地址访问API。
D.配置API到客户端VPC的PrivateLink连接，
使用PrivateLink地址访问API。
E.在两个帐户之间配置一个AWS Resource Access Manager连接。
使用私有地址访问API
Answer: AD

1
2
3
4
5
6
7
8

In Amazon EC2, partial instance-hours are billed
A. per second used in the hour
B. per minute used
C. by combining partial segments into full hours
D. as full hours
Answer: D
在Amazon EC2中，通过将部分段组合成完整小时
A.每小时使用小时B.每分钟使用C.通过将部分分段合并为完整小时D.作为完整小时

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

In EC2, what happens to the data in an instance store if an instance reboots (either intentionally
or unintentionally)?
A. Data is deleted from the instance store for security reasons.
B. Data persists in the instance store.
C. Data is partially present in the instance store.
D. Data in the instance store will be lost.
Answer: B

在EC2中，如果实例重新启动，实例存储中的数据会发生什么（有意重启
或无意间）？
答：出于安全原因，将从实例存储中删除数据。
B.数据保留在实例存储中。
C.数据部分存在于实例存储中。
D.实例存储中的数据将丢失。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

You are setting up a VPC and you need to set up a public subnet within that VPC. Which
following requirement must be met for this subnet to be considered a public subnet?
A. Subnet's traffic is not routed to an internet gateway but has its traffic routed to a virtual private
gateway.
B. Subnet's traffic is routed to an internet gateway.
C. Subnet's traffic is not routed to an internet gateway.
D. None of these answers can be considered a public subnet.
Answer; B
您正在设置VPC，并且需要在该VPC中设置公共子网。 哪一个
要将此子网视为公共子网，必须满足以下要求？
答：A子网的流量不会路由到Internet网关，但会将其流量路由到虚拟专用网络
网关。
B.子网的流量被路由到Internet网关。
C.子网的流量未路由到Internet网关。
D.这些答案都不能视为公共子网。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

Can you specify the security group that you created for a VPC when you launch an instance in
EC2-Classic?
A. No, you can specify the security group created for EC2-Classic when you launch a VPC instance.
B. No
C. Yes
D. No, you can specify the security group created for EC2-Classic to a non-VPC based instance
only,
Answer: B
在以下情况下启动实例时，可以指定为VPC创建的安全组吗？
EC2-Classic？
答：否，您可以在启动VPC实例时指定为EC2-Classic创建的安全组。
B.不
C.是的
D.否，您可以将为EC2-Classic创建的安全组指定为基于非VPC的实例
只要，

1
2
3
4
5
6
7
8

While using the EC2 GET requests as URLs, the
is the URL that serves as the entry point
for the web service,
A. token
B. endpoint
C. action
D. None of these
Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

You have been asked to build a database warehouse using Amazon Redshift. You know a ltte
about it, including that it is a SQL data warehouse solution, and uses industry standard ODBC
and JDBC connections and PostgreSQL drivers, However you are not sure about what sort of
storage it uses for database tables. What sort of storage does Amazon Redshift use for database
tables?
A. InnoDB Tables
B. NDB data storage
C. Columnar data storage
D. NDB CLUSTER Storage
Answer: C
您被要求使用Amazon Redshift构建数据库仓库。您了解它，包括它是SQL数据仓库解决方案，
并使用行业标准的ODBC和JDBC连接以及PostgreSQL驱动程序。但是，您不确定它用于数据库表的存储类型。 
Amazon Redshift对数据库表使用哪种存储方式？
A.InnoDB表B.NDB数据存储C.列数据存储D.NDB集群存储

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

You are checking the workload on some of your General Purpose (SSD) and Provisioned IOPS
(SSD) volumes and it seems that the I/O latency is higher than you require. You should probably
check the_ to make sure that your application is not trying to drive more IOPS
than you have provisioned.

A. Amount of IOPS that are available
b Acknowledgement from the storage subsystem
c. Average queue length
D. Time it takes for the I/O operation to complete
Answer: C
您正在检查某些通用（SSD）卷和预配置IOPS（SSD）卷上的工作负载，并且I / O延迟似乎比您所需的高。
您可能应该检查the_，以确保您的应用程序未尝试驱动比您提供的更多的IOPS。
A.可用的IOPS数量b来自存储子系统的确认c。平均队列长度D。I/ O操作完成所需的时间

1
2
3
4
5
6
7
8

Which of the below mentioned options is not available when an instance is launched by Auto
Scaling with EC2 Classic?
A. Public IP
B. Elastic IP
C. Private DNS
D. Private IP
Answer: B
通过使用EC2 Classic的Auto Scaling启动实例时，以下哪一个选项不可用

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

You have been given a scope to deploy some AWS infrastructure for a large organisation. The
requirements are that you will have a lot of EC2 instances but may need to add more when the
average utilization of your Amazon EC2 fleet is high and conversely remove them when CPU
utilization is low. Which AWS services would be best to use to accomplish this?
A. Auto Scaling, Amazon CloudWatch and AWS Elastic Beanstalk
B.Auto Scaling, Amazon CloudWatch and Elastic Load Balancing.
C. Amazon CloudFront, Amazon CloudWatch and Elastic Load Balancing.
D. AWS Elastic Beanstalk , Amazon CloudWatch and Elastic Load Balancing.
Answer: B
您已经获得了为大型组织部署一些AWS基础设施的范围。要求是您将有很多EC2实例，但是当Amazon EC2队列的平均利用率较高时，可能需要添加更多实例；相反，在CPU利用率较低时，则将它们删除。最好使用哪种AWS服务来完成此任务？ A. Auto Scaling，Amazon CloudWatch和AWS Elastic Beanstalk B.Auto Scaling，Amazon CloudWatch和Elastic Load Balancing C. Amazon CloudFront，Amazon CloudWatch和弹性负载平衡。 D.AWS Elastic Beanstalk，Amazon CloudWatch和Elastic Load Balancing

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A company's legacy application is currently relying on a single-instance Amazon RDS MySQL
database without encryption,
Due to new compliance requirements, all existing and new data in this database must be
encrypted.
How should this be accomplished?
A. Create an Amazon S3 bucket with server-side encryption enabled.
Move all the data to Amazon S3 Delete the RDS instance.
B. Enable RDS Multi-AZ mode with encryption at rest enabled.
Perform a failover to the standby instance to delete the original instance.
C. Take a snapshot of the RDS instance Create an encrypted copy of the snapshot.
Restore the RDS instance from the encrypted snapshot.
D. Create an RDS read replica with encryption at rest enabled.
Promote the read replica to master and switch the application over to the new master Delete the
old RDS instance.
Answer: C
公司的旧版应用程序当前依赖于未加密的单实例Amazon RDS MySQL数据库。由于新的合规性要求，必须对该数据库中的所有现有数据和新数据进行加密。应该如何完成？ A.创建一个启用了服务器端加密的Amazon S3存储桶。将所有数据移至Amazon S3。删除RDS实例。 B.启用RDS多可用区模式，并启用静态加密。对备用实例执行故障转移以删除原始实例。 C.拍摄RDS实例的快照创建快照的加密副本。从加密的快照还原RDS实例。 D.创建一个启用了静态加密的RDS只读副本。提升只读副本为主副本，然后将应用程序切换到新的主副本上。删除旧的RDS实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A company has a three-tier image-sharing application it uses an Amazon EC2 instance for the
front-end layer, another for the backend tier, and a third for the MySQL database.
A solutions architect has been tasked with designing a solution that is highly available, and
requires the least amount of changes to the application.
Which solution meets these requirements"?
A. Use Amazon S3 to host the front-end layer and AWS Lambda functions for the backend layer.
Move the database to an Amazon DynamoDB table and use Amazon S3 to store and serve users'
images.
B. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end and backend
layers.
Move the database to an Amazon RDS instance with multiple read replicas to store and serve
users' images.
c. Use Amazon S3 to host the front-end layer and a fleet of Amazon EC2 instances in an Auto
Scaling group for the backend layer.
Move the database to a memory optimized instance type to store and serve users' images.
D. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end and backend
layers.
Move the database to an Amazon RDS instance with a Multi-AZ deployment Use Amazon S3 to
store and serve users' images.
Answer: D
一家公司有一个三层的图像共享应用程序，它在前端层使用Amazon EC2实例，在后端层使用另一个实例，而对MySQL数据库使用第三个实例。
解决方案架构师的任务是设计一个高度可用的解决方案，并且需要对应用程序进行的更改最少。哪个解决方案满足这些要求？”
A.使用Amazon S3托管前端层，并为后端层托管AWS Lambda函数。将数据库移至Amazon DynamoDB表，并使用Amazon S3存储和提供用户图像。对前端层和后端层使用负载平衡的多可用区AWS Elastic Beanstalk环境；
B将数据库移至具有多个只读副本的Amazon RDS实例，以存储和提供用户图像； 
c。使用Amazon S3托管前端数据库。后端层和后端层的Auto Scaling组中的一系列Amazon EC2实例；
D将数据库移至内存优化实例类型以存储和提供用户图像D.使用负载平衡的Multi-AZ AWS Elastic Beanstalk环境将数据库移动到具有多可用区部署的Amazon RDS实例使用Amazon S3存储和提供用户图像

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A web application is deployed in the AWS Cloud It consists of a two-tier architecture that includes
a web layer and a database layer.
The web server is vulnerable to cross-site scripting (XSS) attacks.
What should a solutions architect do to remediate the vulnerability?
A. Create a Classic Load Balancer.
Put the web layer behind the load balancer and enable AWS WAF.
B. Create a Network Load Balancer.
Put the web layer behind the load balancer and enable AWS WAF.
C. Create an Application Load Balancer.
Put the web layer behind the load balancer and enable AWS WAF.
D. Create an Application Load Balancer.
Put the web layer behind the load balancer and use AWS Shield Standard.
Answer: C
Web应用程序部署在AWS Cloud中，它由两层体系结构组成，该体系结构包含Web层和数据库层。 Web服务器容易受到跨站点脚本（XSS）攻击。
解决方案架构师应采取什么措施来补救此漏洞？ 
A.创建一个经典的负载均衡器。将Web层放在负载均衡器后面，然后启用AWS WAF。 
B.创建一个网络负载平衡器。将Web层放在负载均衡器后面，然后启用AWS WAF。
C.创建一个应用程序负载平衡器。将Web层放在负载均衡器后面，然后启用AWS WAF。
D.创建一个应用程序负载均衡器

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

A recently acquired company is required to buikl its own infrastructure on AWS and migrate
multiple applications to the cloud within a month.
Each application has approximately 50 TB of data to be transferred.
After the migration is complete this company 'and its parent company will both require secure
network connectivity with consistent throughput from their data centers to the applications.
A solutions architect must ensure one-time data migration and ongoing network connectivity.
Which solution will meet these requirements"
A. AWS Direct Connect for both the initial transfer and ongoing connectivity
B. AWS Site-to-Site VPN for both the initial transfer and ongoing connectivity
C.AWS Snowball for the initial transfer and AWS Direct Connect for ongoing connectivity
D. AWS Snowball for the initial transfer and AWS Site-to-Site VPN for ongoing connectivity

需要最近收购的公司在AWS上构建自己的基础架构并进行迁移
一个月内将多个应用程序迁移到云。
每个应用程序都有大约50 TB的数据要传输。
迁移完成后，“这家公司”及其母公司都将要求安全
从数据中心到应用程序的吞吐量始终保持一致的网络连接。
解决方案架构师必须确保一次性数据迁移和持续的网络连接。
哪种解决方案将满足这些要求”
A.适用于初始传输和持续连接的AWS Direct Connect
B.适用于初始传输和持续连接的AWS Site-to-Site VPN
C.AWS Snowball用于初始传输，AWS Direct Connect用于持续连接
D.AWS Snowball用于初始传输，AWS Site-to-Site VPN用于持续连接
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

Organizers for a global event want to put daily reports online as static HTML pages.
The pages are expected to generate millions of views from users around the world The files are
stored in an Amazon S3 bucket.
A solutions architect has been asked to design an efficient and effective solution.
Which action should the solutions architect take to accomplish this?
A. Generate presigned URLs for the files
B. Use cross-Region replication to all Regions
Use the geoproximity feature of Amazon Route 53
D. Use Amazon CloudFront with the S3 bucket as its origin
Answer: D
全球活动的组织者希望将每日报告作为静态HTML页面进行在线发布。这些页面有望产生来自全球用户的数百万个视图。文件存储在Amazon S3存储桶中。解决方案架构师已被要求设计一个有效的解决方案。解决方案架构师应采取什么行动来完成此任务？ A.为文件生成预签名URL B.对所有区域使用跨区域复制使用Amazon Route 53的geoproximity功能D.将Amazon CloudFront与S3存储桶作为源

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

A company runs an application on a group of Amazon Linux EC2 instances, 
The application writes log files using standard API calls For compliance reasons, all log files must
be retained indefinitely and, will be analyzed by a reporting tool that must access all files
concurrently.
Which storage service should a solutions architect use to provide the MOST cost-effective
solution?
A. Amazon EBS
B. Amazon EFS
C. Amazon EC2 instance store
D. Amazon S3
Answer: D
一家公司在一组Amazon Linux EC2实例上运行一个应用程序，该应用程序使用标准API调用写入日志文件。出于合规性原因，必须无限期保留所有日志文件，并且将由必须同时访问所有文件的报告工具进行分析。解决方案架构师应使用哪种存储服务来提供最具成本效益的解决方案？ A.Amazon EBS B.Amazon EFS C.Amazon EC2实例存储D.Amazon S3

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A company's application is running on Amazon EC2 instances m a single Region in the event of a
disaster a solutions architect needs to ensure that the resources can also be deployed to a
second Region.
Which combination of actions should the solutions architect take to accomplish this-? (Select
TWO)
A. Detach a volume on an EC2 instance and copy it to Amazon S3
B. Launch a new EC2 instance from an Amazon Machine image (AMI) in a new Region
C. Launch a new EC2 instance in a new Region and copy a volume from Amazon S3 to the new
instance
D. Copy an Amazon Machine Image (AMI) of an EC2 instance and specify a different Region for the
destination
E. Copy an Amazon Elastic Block Store (Amazon EBS) volume from Amazon S3 and launch an EC2
instance in the destination Region using that EBS volume
Answer: BD
发生灾难时，公司的应用程序正在单个区域内的Amazon EC2实例上运行，解决方案架构师需要确保资源也可以部署到第二个区域。解决方案架构师应采取哪种行动组合来完成此任务？ （选择两个）A.分离EC2实例上的卷并将其复制到Amazon S3B。从新区域C中的Amazon Machine image（AMI）启动新的EC2实例C.在新区域中启动新的EC2实例并将卷从Amazon S3复制到新实例D。复制EC2实例的Amazon机器映像（AMI）并为目标E指定其他区域。从Amazon S3复制Amazon Elastic Block Store（Amazon EBS）卷并启动使用该EBS卷的目标区域中的EC2实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A solutions architect is designing a two-tier web application.
The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets.
The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet
Security is a high priority for the company,
How should security groups be configured in this situation? (Select TWO)
A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0.0.0.0/0
B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0.0.0.0/0
C. Configure the security group for the database tier to allow inbound traffic on port 1433 from the
security group for the web tier
D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433
to the security group for the web tier
E. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433
from the security group for the web tier
Answer: AC
解决方案架构师正在设计两层Web应用程序。该应用程序由公共子网中的Amazon EC2托管的面向公众的Web层组成。数据库层由在私有子网中的Amazon EC2上运行的Microsoft SQL Server组成，安全性是公司的高度优先事项，在这种情况下应如何配置安全组？ （选择两个）A.配置Web层的安全组，以允许端口443上的入站流量来自0.0.0.0/70B。配置Web层的安全组，以允许端口443上的出站流量从0.0.0.0/0开始C.配置数据库层的安全组，以允许来自Web层D的安全组在端口1433上的入站流量。配置数据库层的安全组，以允许从端口443和1433到安全层的出站流量。 Web层E.配置数据库层的安全组，以允许来自Web层安全组的端口443和1433上的入站流量

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

A data science team requires storage for nightly log processing.
The size and number of logs is unknown and will persist for 24 hours only.
What is the MOST cost-effective solution?
A. Amazon S3 Glacier
B. Amazon S3 Standard

C. Amazon S3 intelligent-Tiering
D. Amazon S3 One Zone-Infrequent Access (S3 One Zone-lA)
Answer: B
据科学团队需要存储以进行每晚日志处理。日志的大小和数量是未知的，并将仅保留24小时。什么是最具成本效益的解决方案？ A.Amazon S3 Glacier B.Amazon S3标准 C.Amazon S3智能分层D.Amazon S3一区不频繁访问（S3一区lA）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A company is hosting a web application on AWS using a single Amazon EC2 instance that stores
user- uploaded documents in an Amazon EBS volume.
For better scalability and availability the company duplicated the architecture and created a
second EC2 instance and EBS volume in another Availability Zone: placing both behind an
Application Load Balancer.
After completing this change users reported that each time they refreshed the website they could
see one subset of their documents or the other but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their documents at once"
A. Copy the data so both EBS volumes contain all the documents.
B. Configure the Application Load Balancer to direct a user to the server with the documents.
C. Copy the data from both EBS volumes to Amazon EFS.
Modify the application to save new documents to Amazon EPS.
D. Configure the Application Load Balancer to send the request to both servers.
Return each document from the correct server.
Answer: C
一家公司正在使用单个Amazon EC2实例在AWS上托管Web应用程序，该实例将用户上传的文档存储在Amazon EBS卷中。为了获得更好的可伸缩性和可用性，该公司复制了架构，并在另一个可用区中创建了第二个EC2实例和EBS卷：将两者都放置在Application Load Balancer后面。完成此更改后，用户报告说，每次刷新网站时，他们可以看到其文档的一个子集或另一个，但是却无法同时看到所有文档。解决方案架构师应采取什么措施来确保用户立即看到其所有文档。” A.复制数据，以便两个EBS卷都包含所有文档。B.配置应用程序负载平衡器以将用户与文档一起引导到服务器。将两个EBS卷中的数据复制到Amazon EFS。修改应用程序以将新文档保存到Amazon EPS。D.配置应用程序负载平衡器以将请求发送到两个服务器，从正确的服务器返回每个文档。

1
2
3
4
5
6
7
8
9

You are building infrastructure for a data warehousing solution and an extra request has come
through that there will be a lot of business reporting queries running all the time and you are not
sure if your current DB instance will be able to handle it. What would be the best solution for this?
A. DB Parameter Groups
B. Read Replicas
C. Multi-AZ DB Instance deployment
D. Database Snapshots
Answer: B
您正在为数据仓库解决方案构建基础结构，并且提出了额外的要求，即始终有大量业务报告查询在运行，并且您不确定当前的数据库实例是否能够处理它。最好的解决方案是什么？ A.数据库参数组B.只读副本C.多可用区数据库实例部署D.数据库快照

1
2
3
4
5
6
7
8

In DynamoDB, could you use IAM to grant access to Amazon DynamoDB resources and API
actions?
A. In DynamoDB there is no need to grant access
b Depended to the type of access
C. No
D. Yes
Answer: D
在DynamoDB中，您可以使用IAM授予对Amazon DynamoDB资源和API操作的访问权限吗？ A.在DynamoDB中，无需授予访问权限 b取决于访问类型C。否D.是

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

Much of your company's data does not need to be accessed often, and can take several hours for
retrieval time, so it's stored on Amazon Glacier. However someone within your organization has
expressed concerns that his data is more sensitive than the other data, and is wondering whether
the high level of encryption that he knows is on S3 is also used on the much cheaper Glacier
service. Which of the following statements would be most applicable in regards to this concern?
A. There is no encryption on Amazon Glacier, that's why it is cheaper.
B. Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than
Amazon S3 but you can change it to AES 256 if you are willing to pay more.
C. Amazon Glacier automatically encrypts the data using AES-256, the same as Amazon S3.
D. Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than
Amazon S3.
Answer: C
公司的许多数据不需要经常访问，并且可能需要花费几个小时才能检索，因此将其存储在Amazon Glacier上。但是，您组织中的某人已经表示担心，他的数据比其他数据更敏感，并且想知道他知道的S3上的高级加密是否也用于便宜得多的Glacier服务上。关于此问题，以下哪种说法最适用？答：Amazon Glacier上没有加密，这就是为什么它更便宜。 B. Amazon Glacier使用比Amazon S3少的加密方法使用AES-128自动加密数据，但是如果您愿意支付更多费用，则可以将其更改为AES 256。 C. Amazon Glacier与Amazon S3一样，使用AES-256自动加密数据。 D. Amazon Glacier使用AES-128自动加密数据，这是比Amazon S3少的加密方法

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

Your EBS volumes do not seem to be performing as expected and your team leader has
requested you look into improving their performance. Which of the following is not a true
statement relating to the performance of your EBS volumes?

A. Frequent snapshots provide a higher level of data durability and they will not degrade the
performance of your application while the snapshot is in progress.
B. General Purpose (SSD) and Provisioned IOPS (SSD) volumes have a throughput limit of 128
MB/s per volume.
C. There is a relationship between the maximum performance of your EBS volumes, the amount of
I/O you are driving to them, and the amount of time it takes for each transaction to complete.
D. There is a 5 to 50 percent reduction in IOPS when you first access each block of data on a newly
created or restored EBS volume
Answer: A

您的EBS量似乎表现不理想，而您的团队负责人
要求您研究改善其性能。 以下哪项是不正确的
有关您的EBS卷性能的声明？
答：频繁快照可提供更高级别的数据持久性，并且不会降低快照质量。
快照进行过程中应用程序的性能。
B.通用（SSD）和预配置IOPS（SSD）卷的吞吐量限制为128
每卷MB / s。
C.您的EBS卷的最大性能与
您正在驱动他们的I / O，以及完成每个事务所花费的时间。
D.当您第一次访问新的数据块时，IOPS降低了5％到50％
创建或还原的EBS卷

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

You've created your first load balancer and have registered your EC2 instances with the load
balancer. Elastic Load Balancing routinely performs health checks on all the registered EC2
instances and automatically distributes all incoming requests to the DNS name of your load
balancer across your registered, healthy EC2 instances. By default, the load balancer uses the
_protocol for checking the health of your instances.

A. HTTPS
B. HTTP
C. ICMP
D. lPv6
Answer: B
您已经创建了第一个负载均衡器，并已向负载注册了EC2实例。
平衡器。 Elastic Load Balancing定期对所有已注册的EC2执行运行状况检查
实例并自动将所有传入请求分发到您的负载的DNS名称
您已注册的健康EC2实例之间的平衡器。 默认情况下，负载均衡器使用
_protocol，用于检查实例的运行状况。

A.HTTPS
B.HTTP
C.ICMP
D.pv6

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A major finance organisation has engaged your company to set up a large data mining
application. Using AWS you decide the best service for this is Amazon Elastic MapReduce(EMR)
which you know uses Hadoop. Which of the following statements best describes Hadoop?
A. Hadoop is 3rd Party software which can be installed using AMI
B. Hadoop is an open source python web framework
C. Hadoop is an open source Java software framework
D. Hadoop is an open source javascript framework
Answer: C
一家大型财务组织已聘请您的公司来建立大数据挖掘
应用。 使用AWS可以确定最适合此服务的服务是Amazon Elastic MapReduce（EMR）
您知道使用Hadoop。 以下哪个语句最能描述Hadoop？
A. Hadoop是可以使用AMI安装的第三方软件
B. Hadoop是一个开源python Web框架
C. Hadoop是一个开源Java软件框架
D. Hadoop是一个开源javascript框架
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

In Amazon EC2 Container Service, are other container types supported?
A. Yes, EC2 Container Service supports any container service you need.
b Yes, EC2 Container Service also supports Microsoft container service.
C. No, Docker is the only container platform supported by EC2 Container Service presently,
D. Yes, EC2 Container Service supports Microsoft container service and Openstack.
Answer: C
在Amazon EC2容器服务中，是否支持其他容器类型？
答：是的，EC2容器服务支持您需要的任何容器服务。
b是，EC2容器服务还支持Microsoft容器服务。
C.不，Docker是目前EC2 Container Service支持的唯一容器平台，
D.是的，EC2 Container Service支持Microsoft容器服务和Openstack。
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A Solutions Architect is designing the architecture for a web application that will be hosted on
AWS. Internet users will access the application using HTTP and HTTPS.
How should the Architect design the traffic control requirements?
A. Use a network ACL to allow outbound ports for HTTP and HTTPS, Deny other traffic for inbound
and outbound.
B. Use a network ACL to allow inbound ports for HTTP and HT TPS. Deny other traffic for inbound
and outbound.
C. Allow inbound ports for HTTP and HTTPS in the security group used by the web servers.
D. Allow outbound ports for HTTP and HTTPS in the security group used by the web servers.
Answer: C
解决方案架构师正在设计将在以下位置托管的Web应用程序的体系结构
AWS。 Internet用户将使用HTTP和HTTPS访问该应用程序。
架构师应如何设计交通控制要求？
A.使用网络ACL允许HTTP和HTTPS的出站端口，拒绝入站的其他流量
和出站。
B.使用网络ACL允许HTTP和HT TPS的入站端口。 拒绝入站的其他流量
和出站。
C.在Web服务器使用的安全组中允许HTTP和HTTPS的入站端口。
D.在Web服务器使用的安全组中允许HTTP和HTTPS的出站端口。
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

A solutions architect is designing a system to analyze the performance of financial markets while
the markets are closed.
The system will run a series of compute-intensive jobs for 4 hours every night.
The time to complete the compute jobs is expected to remain constant, and jobs cannot be
interrupted once started.
Once completed, the system is expected to run for a minimum of 1 year.
Which type of Amazon EC2 instances should be used to reduce the cost of the system?
A. Spot Instances
B. On-Demand Instances
C. Standard Reserved Instances
D. Scheduled Reserved Instances
Answer: D
解决方案架构师正在设计一个系统来分析金融市场的表现，同时
市场关闭。
该系统每晚将运行一系列计算密集型作业，持续4小时。
预计完成计算作业的时间将保持不变，并且作业不能
一旦开始中断。
一旦完成，该系统预计将运行至少一年。
应该使用哪种类型的Amazon EC2实例来降低系统成本？
A.竞价型实例
B.按需实例
C.标准预留实例
D.预定的预留实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

A company hosts a static website on-premises and wants to migrate the website to AWS.
The website should load as quickly as possible for users around the world.
The company also wants the most cost- effective solution.
What should a solutions architect do to accomplish this?
A. Copy the website content to an Amazon S3 bucket.
Configure the bucket to serve static webpage content.
Replicate the S3 bucket to multiple AWS Regions
B. Copy the website content to an Amazon S3 bucket.
Configure the bucket to serve static webpage content.
Configure Amazon CloudFront with the S3 bucket as the origin
c. Copy the website content to an Amazon EBS-backed.
Amazon EC2 instance running Apache HTTP Server.
Configure Amazon Route 53 geolocation routing policies to select the closest origin
D. Copy the website content to multiple Amazon EBS-backed.
Amazon EC2 instances running Apache HTTP Server in multiple AWS Regions.
Configure Amazon CloudFront geolocation routing policies to select the closest origin
Answer: B
一家公司在本地托管一个静态网站，并希望将该网站迁移到AWS。
该网站应尽快为世界各地的用户加载。
该公司还希望获得最具成本效益的解决方案。
解决方案架构师应该怎么做才能做到这一点？
A.将网站内容复制到Amazon S3存储桶。
配置存储桶以提供静态网页内容。
将S3存储桶复制到多个AWS区域
B.将网站内容复制到Amazon S3存储桶。
配置存储桶以提供静态网页内容。
以S3存储桶为源配置Amazon CloudFront
C。将网站内容复制到Amazon EBS支持的网站。
运行Apache HTTP Server的Amazon EC2实例。
配置Amazon Route 53地理位置路由策略以选择最接近的来源
D.将网站内容复制到多个由Amazon EBS支持的网站。
在多个AWS区域中运行Apache HTTP Server的Amazon EC2实例。
配置Amazon CloudFront地理位置路由策略以选择最接近的来源
答案：B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

A solutions architect is implementing a document review application using an Amazon S3 bucket
for storage.
The solution must prevent accidental deletion of the documents and ensure that all versions of
the documents are available.
Users must be able to download, modify, and upload documents.
Which combination of actions should be taken to meet these requirements'? (Select TWO )
A. Enable a read. only bucket ACL
B. Enable versioning on the bucket
C. Attach an IAM policy to the bucket
D. Enable MFA Delete on the bucket
E. Encrypt the bucket using AWS KMS

Answer: BD
解决方案架构师正在使用Amazon S3存储桶实施文档审阅应用程序
用于存储。
解决方案必须防止意外删除文档，并确保所有版本的
这些文件可用。
用户必须能够下载，修改和上传文档。
应该采取哪些行动组合才能满足这些要求？ （选择两个）
答：启用读取。 唯一存储桶ACL
B.在存储桶上启用版本控制
C.将IAM策略附加到存储桶
D.在存储桶上启用MFA删除
E.使用AWS KMS加密存储桶

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

A company built a food ordering application that captures user data and stores it for future
analysis.
The application's static front end is deployed on an Amazon EC2 instance.
The front-end application sends the requests to the backend application running on separate EC2
instance.
The backend application then stores the data in Amazon RDS
What should a solutions architect do to decouple the architecture and make it scalable"
A. Use Amazon S3 to serve the front-end application which sends requests to Amazon EC2 to
execute the backend application.
The backend application will process and store the data in Amazon RDS
B. Use Amazon S3 to serve the front-end application and write requests to an Amazon Simple
Notification Service (Amazon SNS) topic.
Subscribe Amazon EC2 instances to the HTTP/HTTPS endpoint of the topic and process and
store the data in Amazon RDS
C. Use an EC2 instance to serve the front end and write requests to an Amazon SQS queue.
Place the backend instance in an Auto Scaling group and scale based on the queue depth to
process and store the data in Amazon RDS
D. Use Amazon S3 to serve the static front -end application and send requests to Amazon API
Gateway which writes the requests to an Amazon SQS queue,
Place the backend instances in an Auto Scaling group and scale based on the queue depth to
process and store the data in Amazon RDS
Answer: D
一家公司构建了一个食品订购应用程序，可以捕获用户数据并将其存储以备将来使用
分析。
应用程序的静态前端部署在Amazon EC2实例上。
前端应用程序将请求发送到在单独的EC2上运行的后端应用程序
实例。
然后，后端应用程序将数据存储在Amazon RDS中
解决方案架构师应该怎么做才能使架构脱钩并使其可扩展”
A.使用Amazon S3来服务将请求发送到Amazon EC2的前端应用程序
执行后端应用程序。
后端应用程序将处理数据并将其存储在Amazon RDS中
B.使用Amazon S3来服务前端应用程序并将请求写入Amazon Simple
通知服务（Amazon SNS）主题。
将Amazon EC2实例订阅到主题和过程的HTTP / HTTPS终端节点，以及
将数据存储在Amazon RDS中
C.使用EC2实例服务前端，并将请求写入Amazon SQS队列。
将后端实例放置在Auto Scaling组中，然后根据队列深度进行扩展，以达到
处理数据并将其存储在Amazon RDS中
D.使用Amazon S3服务静态前端应用程序并将请求发送到Amazon API
将请求写入Amazon SQS队列的网关，
将后端实例放置在Auto Scaling组中，然后根据队列深度进行扩展，以达到
处理数据并将其存储在Amazon RDS中

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

A Solutions Architect must design a web application that will be hosted on AWS, allowing users to
purchase access to premium, shared content that is stored in an S3 bucket.
Upon payment, content will be available for download for 14 days before the user is denied
access.
Which of the following would be the LEAST complicated implementation?
A. Use an Amazon CloudFront distribution with an origin access identity (OAl)
Configure the distribution with an Amazon S3 origin to provide access to the file through signed
URLs
Design a Lambda function to remove data that is older than 14 days

b.Use an S3 bucket and provide direct access to the tile
Design the application to track purchases in a DynamoDH table
Configure a Lambda function to remove data that is older than 14 days based oก a query to
Amazon DynamoDB
c.Use an Amazon CloudFront distribution with an OAI
Configure the distribution with an Amazon S3 origin to provide access to the file through signed
URLs
Design the application to sot an expiration of 14 days for the URL
d. Use an Amazon CloudFront distribution with an OAI
Configure the distribution with an Amazon S3 origin to provide access to the file through signed
URLs
Design the application to set an expiration of 60 minutes for the URL and recreate the URL as
necessary
Answer: C
解决方案架构师必须设计一个将托管在AWS上的Web应用程序，以便用户能够
购买对存储在S3存储桶中的高级共享内容的访问权。
付款后，可以在拒绝用户之前的14天内下载内容访问。
以下哪一项是最简单的实现？
A.使用具有原始访问身份（OAl）的Amazon CloudFront分配
使用Amazon S3来源配置分发以通过签名提供对文件的访问
网址设计Lambda函数以删除早于14天的数据
b。使用S3存储桶并直接访问图块
设计应用程序以在DynamoDH表中跟踪购买
配置Lambda函数以根据查询删除超过14天的数据亚马逊DynamoDB
c。将Amazon CloudFront分配与OAI一起使用
使用Amazon S3来源配置分发以通过签名提供对文件的访问
网址将应用程序设计为使URL过期14天
d。将Amazon CloudFront分配与OAI一起使用
使用Amazon S3来源配置分发以通过签名提供对文件的访问
网址设计应用程序以将URL设置为60分钟的到期时间，然后将URL重新创建为
必要

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company captures clickstream data from multiple websites and analyzes it using batch
processing.
The data is loaded nightly into Amazon Redshift and 'is consumed by business analysts.
The company wants to move towards near-real-time data processing for timely insights.
The solution should process the streaming data with minimal effort and operational overhead.
Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)
A. Amazon EC2
B. AWS Lambda
C. Amazon Kinesis Data Streams
D. Amazon Kinesis Data Firehose
E. Amazon Kinesis Data Analytics
Answer: DE

一家公司从多个网站捕获点击流数据并使用批处理对其进行分析
处理。
数据每晚都会加载到Amazon Redshift中，并由业务分析师使用。
该公司希望转向近实时数据处理，以便及时了解情况。
该解决方案应以最少的工作量和操作开销来处理流数据。
对于该解决方案，哪种AWS服务组合最具有成本效益？ （选择两个。）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

A company is migrating a three-tier application to AWS.
The application requires a MySQL database. In the past, the application users reported poor
application performance when creating new entries.
These performance issues were caused by users generating different real-time reports from the
application duringworking hours.
Which solution will improve the performance of the application when it is moved to AWS?
A. Import the data into an Amazon DynamoDB table with provisioned capacity.
Refactor the application to use DynamoDB for reports.
B. Create the database on a compute optimized Amazon EC2 instance.
Ensure compute resources exceed the on-premises database.
C. Create an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replicas.
Configure the application reader endpoint for reports.
D. Create an Amazon Aurora MySQL Multi-AZ DB cluster.
Configure the application to use the backup instance of the cluster as an endpoint for the reports.
Answer: C
一家公司正在将三层应用程序迁移到AWS。
该应用程序需要一个MySQL数据库。 过去，应用程序用户报告的效果不佳
创建新条目时的应用程序性能。
这些性能问题是由用户从
在工作时间内申请。
哪种解决方案将在将应用程序移至AWS时可提高其性能？
A.将数据导入具有预配置容量的Amazon DynamoDB表中。
重构应用程序以使用DynamoDB生成报告。
B.在经过计算优化的Amazon EC2实例上创建数据库。
确保计算资源超出本地数据库。
C.创建具有多个只读副本的Amazon Aurora MySQL Multi-AZ数据库集群。
配置报告的应用程序阅读器端点。
D.创建一个Amazon Aurora MySQL Multi-AZ数据库集群。
配置应用程序以将群集的备份实例用作报告的端点。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

A star-up company has a web application based in the us-east-1 Region with multiple Amazon
EC2 instances running behind an Application Load Balancer across multiple Availability Zones.
As the company's user base grows in the us-west-1 Region, it needs a solution with low latency
and high availability,
What should a solutions architect do to accomplish this?
A. Provision EC2 instances in us-west-1.
Switch the Application Load Balancer to a Network Load Balancer to achieve cross-Region load
balancing.
B. Provision EC2 instances and an Application Load Balancer in us-west-1.
Make the load balancer distribute the traffic based on the location of the request.
c. Provision EC2 instances and configure an Application Load Balancer in us-west-1.
Create an accelerator in AWS Global Accelerator that uses an endpoint group that includes the
load balancer endpoints in both Regions.
D. Provision EC2 instances and configure an Application Load Balancer in us-west-1.
Configure Amazon Route 53 with a weighted routing policy,
Create alias records in Route 53 that point to the Application Load Balancer.
一家星空公司拥有一个基于us-east-1 Region的Web应用程序，其中包含多个Amazon
在多个可用区中的Application Load Balancer后面运行的EC2实例。
随着公司用户群在美国西部1地区的增长，它需要低延迟的解决方案
和高可用性，
解决方案架构师应该怎么做才能做到这一点？
A.在us-west-1中配置EC2实例。
将应用程序负载平衡器切换到网络负载平衡器以实现跨区域负载
平衡。
B.在us-west-1中配置EC2实例和一个Application Load Balancer。
使负载均衡器根据请求的位置分配流量。
C。在us-west-1中配置EC2实例并配置Application Load Balancer。
在AWS Global Accelerator中创建一个加速器，该加速器使用包含以下内容的端点组：
两个区域中的负载均衡器端点。
D.设置EC2实例并在us-west-1中配置一个应用程序负载平衡器。
使用加权路由策略配置Amazon Route 53，
在Route 53中创建指向Application Load Balancer的别名记录。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A company is planning to migrate a business-critical dataset to Amazon S3.
The current solution design uses a single S3 bucket in the us-east-1 Region with versioning
enabled to store the dataset.
The company's disaster recovery policy states that all data multiple AWS Regions.
How should a solutions architect design the S3 solution?
A. Create an additional S3 bucket in another Region and configure cross-Region replication.
B. Create an additional S3 bucket in another Region and configure cross-origin resource sharing
(CORS).
C. Create an additional S3 bucket with versioning in another Region and configure cross-Region
replication,
D. Create an additional S3 bucket with versioning in another Region and configure cross-origin
resource (CORS).
Answer: C
一家公司计划将关键业务数据集迁移到Amazon S3。
当前的解决方案设计在us-east-1 Region中使用单个S3存储桶并进行版本控制
已启用以存储数据集。
该公司的灾难恢复策略规定，所有数据都属于多个AWS区域。
解决方案架构师应如何设计S3解决方案？
A.在另一个区域中创建另一个S3存储桶，并配置跨区域复制。
B.在另一个区域中创建另一个S3存储桶，并配置跨域资源共享
（CORS）。
C.在另一个区域中创建另一个带有版本控制的S3存储桶，并配置跨区域
复制，
D.在另一个区域中创建另一个带有版本控制的S3存储桶，并配置跨域
资源（CORS）。
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company has application running on Amazon EC2 instances in a VPC.
One of the applications needs to call an Amazon S3 API to store and read objects,
The company's security policies restrict any internet-bound traffic from the applications.
Which action will fulfil these requirements and maintain security?
A. Configure an S3 interface endpoint.
B. Configure an S3 gateway endpoint.
C. Create an S3 bucket in a private subnet.
D. Create an S3 bucket in the same Region as the EC2 instance.
Answer: B
公司的应用程序在VPC的Amazon EC2实例上运行。
应用程序之一需要调用Amazon S3 API来存储和读取对象，
公司的安全策略限制了来自应用程序的任何互联网绑定流量。
哪些措施可以满足这些要求并维护安全性？
A.配置一个S3接口端点。
B.配置一个S3网关端点。
C.在专用子网中创建一个S3存储桶。
D.在与EC2实例相同的Region中创建一个S3存储桶。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A company's web application uses an Amazon RDS PostgreSQL DB instance to store jits
application data.
During the financial closing period at the start of every month. Accountants run large queries that
impact the database's performance due to high usage.
The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST
amount of effort?
A. Create a read replica and direct reporting traffic to the replica.
B. Create a Multi-AZ database and direct reporting traffic to the standby.
C. Create a cross-Region read replica and direct reporting traffic to the replica.
D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift
database.
Answer: A

公司的Web应用程序使用Amazon RDS PostgreSQL数据库实例存储jit
应用程序数据。
在每个月初的财务结算期间。 会计师运行大型查询
高使用率会影响数据库的性能。
该公司希望最大程度地减少报告活动对Web应用程序的影响。
解决方案架构师应采取什么措施以使用LEAST减少对数据库的影响
多少努力？
A.创建一个只读副本并将报告流量定向到该副本。
B.创建一个多可用区数据库，并将报告流量定向到备用数据库。
C.创建跨区域的只读副本，并将报告流量定向到该副本。
D.创建一个Amazon Redshift数据库并将报告流量定向到Amazon Redshift
数据库。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company must generate sales reports at the beginning of every month.
The reporting process launches 20 Amazon EC2 instances on the first of the month.
The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?
A. Reserved Instances
B. Spot Block Instances
C. On-Demand Instances
D. Scheduled Reserved Instances
Answer: D
公司必须在每个月初生成销售报告。
该报告流程在每月的第一天启动20个Amazon EC2实例。
该过程运行7天，不能中断。 该公司希望将成本降到最低。
公司应选择哪种定价模式？
A.预留实例
B.竞价块实例
C.按需实例
D.预定的预留实例

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A company is hosting a website behind multiple Application Load Balancers.
The company has different distribution rights for its content around the world.
A solutions architect needs to ensure that users are served the correct content without violating
distribution rights.
Which configuration should the solutions architect choose to meet these requirements?
A. Configure Amazon CloudFront with AWS WAF.
B. Configure Application Load Balancers with AWS WAF.
C. Configure Amazon Route 53 with a geolocation policy,
D. Configure Amazon Route 53 with a geoproximity routing policy.
Answer: C

一家公司正在多个应用程序负载平衡器后面托管一个网站。
该公司对其内容在世界各地具有不同的发行权。
解决方案架构师需要确保为用户提供正确的内容而不会违反
发行权。
解决方案架构师应选择哪种配置来满足这些要求？
A.使用AWS WAF配置Amazon CloudFront。
B.使用AWS WAF配置应用程序负载平衡器。
C.使用地理位置策略配置Amazon Route 53，
D.使用地理邻近性路由策略配置Amazon Route 53。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

A company's website is using an Amazon RDS MySQL 'Multi-AZ DB instance for its transactional
data storage.
There are other internal systems that query this DB instance to fetch data for internal batch
processing,
The RDS DB instance slows down significantly the internal systems fetch data.
This impacts the website's read and write performance, and the users experience slow response
times.
Which solution will improve the website's performance?
A. Use an RDS PostgreSQL DB instance instead of a MySQL database.
B. Use Amazon ElastiCache to cache the query responses for the website.
C. Add an additional Availability Zone to the current RDS MySQL Multi.AZ DB instance.
D. Add a read replica to the RDS DB instance and configure the internal systems to query the read
replica.
Answer: D
一家公司的网站使用Amazon RDS MySQL'Multi-AZ数据库实例进行交易
数据存储。
还有其他内部系统查询此数据库实例以获取数据以进行内部批处理
处理
RDS数据库实例大大降低了内部系统的数据获取速度。
这会影响网站的读写性能，并且用户的响应速度会很慢
次。
哪种解决方案可以改善网站的性能？
答：使用RDS PostgreSQL数据库实例而不是MySQL数据库。
B.使用Amazon ElastiCache缓存网站的查询响应。
C.向当前的RDS MySQL Multi.AZ数据库实例添加一个额外的可用区。
D.将只读副本添加到RDS数据库实例，并配置内部系统以查询该只读副本
复制品。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A solutions architect is designing storage for ล high performance computing (HPC) environment
based on Amazon Linux.
The workload stores and processes a large amount of engineering drawings that require shared
storage and heavy computing.
Which storage option would be the optimal solution?
A. Amazon Elastic File System (Amazon EFS)
B. Amazon FSx for Lustre
C. Amazon EC2 instance store
D. Amazon EBS Provisioned IOPS SSD (io1)
Answer: B
解决方案架构师正在为ล高性能计算（HPC）环境设计存储
基于Amazon Linux。
工作负载存储和处理大量需要共享的工程图
存储和重型计算。
哪个存储选项将是最佳解决方案？
A.Amazon弹性文件系统（Amazon EFS）
B.适用于Lustre的Amazon FSx
C.Amazon EC2实例存储
D.Amazon EBS预置的IOPS SSD（io1）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

A company is performing an AWS Well-Architected Framework review of an existing workload
deployed on AWS.
The review identified a public-facing website running on the same Amazon EC2 instance as a
Microsoft Active Directory domain controller that was install recently to support other AWS
services.
A solutions architect needs to recommend a new design that would improve the security of the
architecture and minimize the administrative demand on IT staff.
What should the solutions architect recommend?
A. Use AWS Directory Service to create a managed Active Directory.
Uninstall Active Directory ๐ก the current EC2 instance.
B. Create another EC2 instance in the same subnet and reinstall Active Directory on it.
Uninstall Active Directory.
C. Use AWS Directory Service to create an Active Directory connector.
Proxy Active Directory requests to the Active domain controller running on the current EC2
instance.
D. Enable AWS Single Sign-On (AWS SSO) with Security Assertion Markup Language (SAML) 2.0
federation with the current Active Directory controller.
Modify the EC2 instance's security group to deny public access to Active Directory.
一家公司正在对现有工作负载执行AWS架构完善的审查
部署在AWS上
该审查确定了一个面向公众的网站，该网站与Amazon EC2实例在同一Amazon EC2实例上运行
最近安装以支持其他AWS的Microsoft Active Directory域控制器
服务。
解决方案架构师需要推荐一种新的设计，以提高安全性。
体系结构并最小化对IT员工的管理需求。
解决方案架构师应该建议什么？
A.使用AWS Directory Service创建托管Active Directory。
卸载Active Directory ๐ก当前的EC2实例。
B.在同一子网中创建另一个EC2实例，然后在其上重新安装Active Directory。
卸载Active Directory。
C。使用AWS Directory Service创建Active Directory连接器。
对当前EC2上运行的Active域控制器的代理Active Directory请求
实例。
D.使用安全性声明标记语言（SAML）2.0启用AWS Single Sign-On（AWS SSO）
当前Active Directory控制器的联合。
修改EC2实例的安全组以拒绝对Active Directory的公共访问。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

A company runs an application in a branch office within a small data closet with no virtualized
compute resources.
The application data is stored on an NFS volume, Compliance standards require a daily offsite
backup of the NFS volume.
Which solution meet these requirements?
A. Install an AWS Storage Gateway file gateway on premises to replicate the data to Amazon S3.
B. Install an AWS Storage Gateway file gateway hardware appliance on premises to replicate the
data to Amazon S3.
C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate
the data to Amazon S3.
D. Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate
the data to Amazon S3.
一家公司在没有虚拟化的小型数据柜中的分支机构中运行应用程序
计算资源。
应用程序数据存储在NFS卷上，合规性标准要求每天在现场
NFS卷的备份。
哪种解决方案满足这些要求？
A.在本地安装一个AWS Storage Gateway文件网关，以将数据复制到Amazon S3。
B.在本地安装AWS Storage Gateway文件网关硬件设备以复制
数据到Amazon S3。
C.在本地安装具有存储卷的AWS Storage Gateway卷网关以进行复制
数据发送到Amazon S3。
D.在本地安装具有缓存卷的AWS Storage Gateway卷网关以进行复制
数据发送到Amazon S3。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

An application hosted on AWS is experiencing performance problems, and the application vendor
wants to perform an analysis of the log file to troubleshoot further. The log file is stored on
Amazon S3 and is 10 GB in size. 
The application owner will make the log file available to the vendor for a limited time.
What is the MOST secure way to do this?
A. Enable public read on the S3 object and provide the link to the vendor.
B. Upload the file to Amazon WorkDocs and share the public link with the vendor.
C. Generate a presigned URL and have the vendor download the log file before it expires.
D. Create an IAM user for the vendor to provide access to the S3 bucket and the application.
Enforce multifactor authentication.
Answer: C
AWS上托管的应用程序遇到性能问题，应用程序供应商
想要对日志文件进行分析以进一步排除故障。 日志文件存储在
Amazon S3，大小为10 GB。
应用程序所有者将在有限的时间内使日志文件对供应商可用。
最安全的方法是什么？
答：启用对S3对象的公共读取，并提供到供应商的链接。
B.将文件上传到Amazon WorkDocs并与供应商共享公共链接。
C.生成一个预签名的URL，并让供应商在日志文件过期之前下载该日志文件。
D.为供应商创建一个IAM用户，以提供对S3存储桶和应用程序的访问。
强制执行多因素身份验证。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

A company hosts its product information webpages on AWS,
The existing solution uses multiple Amazon C2 instances behind an Application Load Balancer in
an Auto Scaling group.
The website also uses a custom DNS name and communicates with HTTPS only using a
dedicated SSL certificate.
The company is planning a new product launch and wants to be sure that users from around the
world have the best possible experience on the new website,
What should a solutions architect do to meet these requirements?
A. Redesign the application to use Amazon CloudFront.
B. Redesign the application to use AWS Elastic Beanstalk.
C. Redesign the application to use a Network Load Balancer.
D. Redesign the application to use Amazon S3 static website hosting
一家公司在AWS上托管其产品信息网页，
现有解决方案在以下应用程序负载均衡器后面使用多个Amazon C2实例
Auto Scaling组。
该网站还使用自定义DNS名称，并且仅使用
专用SSL证书。
该公司正在计划推出新产品，并希望确保来自各地的用户
世界在新网站上拥有最好的体验，
解决方案架构师应该怎么做才能满足这些要求？
A.重新设计应用程序以使用Amazon CloudFront。
B.重新设计应用程序以使用AWS Elastic Beanstalk。
C.重新设计应用程序以使用网络负载平衡器。
D.重新设计应用程序以使用Amazon S3静态网站托管

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached. The peak capacity is the same every night and the batch jobs always start at 1 AM. The solutions architect needs to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scaling group to scale down after the batch jobs are complete.
What should the solutions architect do to meet these requirements?
A. Increase the minimum capacity for the Auto Scaling group.
B.Increase the maximum capacity for the Auto Scaling group.
C. Configure scheduled scaling to scale up to the desired compute level.
D. Change the scaling policy to add more EC2 instances during each scaling operation.
Answer: C
解决方案架构师观察到，在达到所需的Amazon EC2容量之前，夜间批处理作业会自动扩大1小时。 每天晚上的峰值容量是相同的，并且批处理作业始终在凌晨1点开始。 解决方案架构师需要找到一种经济高效的解决方案，以快速达到所需的EC2容量，并允许Auto Scaling组在批处理作业完成后按比例缩小规模。
解决方案架构师应该怎么做才能满足这些要求？
A.增加Auto Scaling组的最小容量。
B．增加Auto Scaling组的最大容量。
C.配置计划的缩放比例以扩展到所需的计算级别。
D.更改扩展策略以在每次扩展操作期间添加更多EC2实例。
答案：C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

An ecommerce company is running a multi-tier application on AWS. The front-end and backend
tiers both run on Amazon EC2. and the database runs on Amazon RDS for MySQL. The backend
tier communicates with the RDS instance. There are frequent calls to return identical datasets
from the database that are causing performance slowdowns.
Which action should be taken to improve the performance of the backend?
A. Implement Amazon SNS to store the database calls.
B. Implement Amazon ElastiCache to cache the large datasets.
C. Implement an RDS for MySQL read replica to cache database calls.
D. Implement Amazon Kinesis Data Firehose to stream the calls to the database.
Answer: B

一家电子商务公司正在AWS上运行多层应用程序。 前端和后端
层均在Amazon EC2上运行。 并且该数据库在Amazon RDS for MySQL上运行。 后端
层与RDS实例进行通信。 经常调用返回相同的数据集
从数据库中导致性能下降。
应该采取什么措施来提高后端的性能？
A.实施Amazon SNS来存储数据库调用。
B.实现Amazon ElastiCache以缓存大型数据集。
C.为MySQL只读副本实现RDS以缓存数据库调用。
D.实施Amazon Kinesis Data Firehose以将调用流式传输到数据库。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

A company's application hosted on Amazon EC2 instances needs to access an Amazon S3
bucket. Due to data sensitivity, traffic cannot traverse the internet How should a solutions
architect configure access?
A. Create a private hosted zone using Amazon Route 53.
B. Configure a VPC gateway endpoint for Amazon S3 in the VPC.
C. Configure AWS PrivateLink between the EC2 instance and the S3 bucket.
D. Set up a site-to-site VPN connection between the VPC and the S3 bucket.
托管在Amazon EC2实例上的公司的应用程序需要访问Amazon S3存储桶。由于数据敏感性，流量无法穿越Internet。解决方案架构师应如何配置访问权限？ 
A.使用Amazon Route 53创建一个私有托管区域。B.在VPC中为Amazon S3配置VPC网关终端节点。 C.在EC2实例和S3存储桶之间配置AWS PrivateLink。 D.在VPC和S3存储桶之间建立站点到站点VPN连接。

Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

An application runs on Amazon EC2 instances in private subnets. The application needs to
access an Amazon DynamoDB table.
What is the MOST secure way to access the table while ensuring that the traffic does not leave
the AWS network?
A. Use a VPC endpoint for DynamoDB.
B. Use a NAT gateway in a public subnet.
C. Use a NAT instance in a private subnet.
D. Use the internet gateway attached to the VPC.
Answer: A
应用程序在专用子网中的Amazon EC2实例上运行。 该应用程序需要
访问Amazon DynamoDB表。
在确保流量不离开的同时访问表的最安全的方法是什么
AWS网络？
A.将VPC端点用于DynamoDB。
B.在公共子网中使用NAT网关。
C.在专用子网中使用NAT实例。
D.使用连接到VPC的Internet网关。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

A solutions architect needs to design a low-latency solution for a static single-page application
accessed by users utilizing a custom domain name. The solution must be serverless, encrypted
in transit, and cost-effective,
Which combination of AWS services and features should the solutions architect use? (Select
TWO.)
A. Amazon S3
B. Amazon EC2
C. AWS Fargate
D. Amazon CloudFront
E. Elastic Load Balancer
Answer: AD

418/5000
解决方案架构师需要为静态单页应用程序设计低延迟解决方案
由使用自定义域名的用户访问。 解决方案必须是无服务器的，加密的
在运输过程中且具有成本效益，
解决方案架构师应使用哪种AWS服务和功能组合？ （选择
二。）
A.亚马逊S3
B.亚马逊EC2
C.AWS Fargate
D.Amazon CloudFront
E.弹性负载平衡器

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company has global users accessing an application deployed in different AWS Regions,
exposing public static IP addresses. The users are experiencing poor performance when
accessing the application over the internet.
What should a solutions architect recommend to reduce internet latency?
A. Set up AWS Global Accelerator and add endpoints.
B. Set up AWS Direct Connect locations in multiple Regions.
C. Set up an Amazon CloudFront distribution to access an application.
D. Set up an Amazon Route 53 geoproximity routing policy to route traffic.
Answer: A
公司有全球用户访问部署在不同AWS区域中的应用程序，
公开公共静态IP地址。 用户在以下情况下表现不佳
通过互联网访问应用程序。
解决方案架构师应建议什么以减少Internet延迟？
A.设置AWS Global Accelerator并添加终端节点。
B.在多个区域中设置AWS Direct Connect位置。
C.设置一个Amazon CloudFront发行版以访问应用程序。
D.设置Amazon Route 53地理接近路由策略以路由流量。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

An application requires a development environment (DÊV) and production environment (PROD)
for several years. The DEV instances will run for 10 hours each day during normal business
hours, while the PROD instances will run 24 hours each day, A solutions architect needs to
determine a compute instance purchase strategy to minimize costs.
Which solution is the MOST cost-effective?
A. DEV with Spot Instances and PROD with On-Demand Instances
B. DEV with On-Demand Instances and PROD with Spot Instances
C. DEV with Scheduled Reserved Instances and PROD with Reserved Instances
D. DEV with On-Demand Instances and PROD with Scheduled Reserved Instances
Answer: C
应用程序需要开发环境（DÊV）和生产环境（PROD）
几年来。 在正常业务期间，DEV实例每天将运行10个小时
小时，而PROD实例每天24小时运行，那么解决方案架构师需要
确定计算实例购买策略以最小化成本。
哪种解决方案最有效？
A.具有竞价型实例的DEV和具有按需实例的PROD
B.带按需实例的DEV和带竞价实例的PROD
C.具有预定保留实例的DEV和具有保留实例的PROD
D.具有按需实例的DEV和具有计划的预留实例的PROD

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

A solutions architect is designing a customer-facing application. The application is expected to
have a variable amount of reads and writes depending on the time of year and clearly defined
access patterns throughout the year. Management requires that database auditing and scaling be
managed in the AWS Cloud. The Recovery Point Objective (RPO) must be less than 5 hours.
Which. solutions can accomplish this? (Select TWO.)
A. Use Amazon DynamoDB with auto scaling,
Use on-demand backups and AWS CloudTrail.
B. Use Amazon DynamoDB with auto scaling,
Use on-demand backups and Amazon DynamoDB Streams.
C. Use Amazon Redshift Configure concurrency scaling.
Enable audit logging.
Perform database snapshots every 4 hours.
D. Use Amazon RDS with Provisioned lOPS.
Enable the database auditing parameter.
Perform database snapshots every 5 hours.
E. Use Amazon RDS with auto scaling.
Enable the database auditing parameter.
Configure the backup retention period to at least 1 day.
Answer: AE
解决方案架构师正在设计面向客户的应用程序。 该应用程序有望
根据一年中的不同时间具有不同的读写次数，并且定义明确
全年的访问方式。 管理部门要求对数据库进行审核和扩展
在AWS云中进行管理。 恢复点目标（RPO）必须少于5小时。
哪一个。 解决方案可以做到这一点？ （选择两个。）
A.使用Amazon DynamoDB自动缩放功能，
使用按需备份和AWS CloudTrail。
B.将Amazon DynamoDB与自动缩放一起使用，
使用按需备份和Amazon DynamoDB流。
C.使用Amazon Redshift配置并发扩展。
启用审核日志记录。
每4小时执行一次数据库快照。
D.将Amazon RDS与预置的lOPS一起使用。
启用数据库审核参数。
每5小时执行一次数据库快照。
E.将Amazon RDS与自动缩放一起使用。
启用数据库审核参数。
将备份保留期配置为至少1天。
答：AE

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

A company hosts its website on Amazon S3. The website serves petabytes of outbound traffic
monthly, which accounts for most of the company's AWS costs,
What should a solutions architect do to reduce costs?
A. Configure Amazon CloudFront with the existing website as the origin.
B. Move the website to Amazon EC2 with Amazon EBS volumes for storage.
C.
Use AWS Global Accelerator and specify the existing website as the endpoint.
D, Rearchitect the website to run on a combination of Amazon API Gateway and AWS Lambda.
Answer: A
517/5000
一家公司在Amazon S3上托管其网站。 该网站提供了PB的出站流量
每月，这占了公司大部分AWS成本，
解决方案架构师应该怎么做才能降低成本？
A.使用现有网站作为来源配置Amazon CloudFront。
B.将网站移至带有Amazon EBS卷的Amazon EC2进行存储。
C。使用AWS Global Accelerator并将现有网站指定为终端节点。
D，重新构建网站以在Amazon API Gateway和AWS Lambda的组合上运行。
Explanation:
A textbook case for CloudFront, The data transfer cost in CloudFront is lower than in S3. With
heavy read operations of static content, it's more economical to add CloudFront in front of you S3
bucket.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

A solution architect has created two IAM policies: Policy1 and Policy2. Both policies are attached
to an IAM group.

Policy1
[
"Version": "2012-10-17", "Statement": [
(
"Effect": "Allow",
"Action":[
"iam:Get*",
"iam:List*",
"kms:List* ",
"ec2:*",
"ds:*",
"logs:Get*",
"logs: Describe* "
1,
"Resource": "*"
]
)
Policy2
[
"Version": "2012-10-17",
"Statement":[
"Effect": "Deny",
"Action": "ds:Delete*",
"Resource": "*"
]
)
A cloud engineer is added as an IAM user to the IAM group, 'Which action will the cloud engineer
be able to perform?

A. Deleting IAM users
B. Deleting directories
C. Deleting Amazon EC2 instances
D. Deleting logs from Amazon CloudWatch Logs
Answer: C  

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A solutions architect is helping a developer design a new ecommerce shopping cart application
using AWS services. The developer is unsure of the current database schema and expects to
make changes as the ecommerce site grows. The solution needs to be highly resilient and
capable of automatically scaling read and write capacity.
Which database solution meets these requirements?
A. Amazon Aurora PostgreSQL
B. Amazon DynamoDB with on-demand enabled
C. Amazon DynamoDB with DynamoDB Streams enabled
D. Amazon SQS and Amazon Aurora PostgreSQL
Answer: B
解决方案架构师正在帮助开发人员设计新的电子商务购物车应用程序
使用AWS服务。 开发人员不确定当前的数据库架构，并希望
随着电子商务网站的发展进行更改。 解决方案必须具有高度的弹性和
能够自动扩展读写容量。
哪个数据库解决方案满足这些要求？
A.Amazon Aurora PostgreSQL
B.启用按需的Amazon DynamoDB
C.启用了DynamoDB流的Amazon DynamoDB
D.Amazon SQS和Amazon Aurora PostgreSQL

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A solutions architect is designing an architecture for a new application that requires low network
latency and high network throughput between Amazon EC2 instances. Which component should
be included in the architectural design?
A. An Auto Scaling group with Spot Instance types.
B. A placement group using a cluster placement strategy.
C. A placement group using a partition placement strategy.
D. An Auto Scaling group with On-Demand instance types.
解决方案架构师正在为需要低网络的新应用程序设计体系结构
Amazon EC2实例之间的延迟和高网络吞吐量。 哪个组件应该
被包括在建筑设计中？
A.具有竞价型实例类型的Auto Scaling组。
B.使用集群放置策略的放置组。
C.使用分区放置策略的放置组。
D.具有按需实例类型的Auto Scaling组。
Answer: B

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

A company has a web application with sporadic usage patterns. There is heavy usage at the
beginning of each month, moderate usage at the start of each week, and unpredictable usage
during the week. The application consists of a web server and a MySQL database server running
inside the data center. The company would like to move the application to the AWS Cloud, and
needs to select a cost-effective database platform that will not require database modifications.
Which solution will meet these requirements?
A. Amazon DynamoDB
B. Amazon RDS for MySQL
C. MySQL-compatible Amazon Aurora Serverless
D. MySQL deployed on Amazon EC2 in an Auto Scaling group
Answer: c
公司的Web应用程序具有零星的使用模式。 有大量的使用
每个月初，每个星期初使用量适中，使用量不可预测
本周内。 该应用程序由运行中的Web服务器和MySQL数据库服务器组成
在数据中心内。 该公司希望将应用程序移至AWS Cloud，并
需要选择一个不需要数据库修改的具有成本效益的数据库平台。
哪种解决方案可以满足这些要求？
A.Amazon DynamoDB
B.适用于MySQL的Amazon RDS
C.与MySQL兼容的Amazon Aurora Serverless
D.在Auto Scaling组中部署在Amazon EC2上的MySQL

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

A solutions architect is designing a mission-critical web application. It will consist of Amazon EC2
instances behind an Application Load Balancer and a relational database. The database should
be highly available and fault tolerant.
Which database implementations will meet these requirements? (Select TWO.)
A. Amazon Redshift
B. Amazon DynamoDB
C. Amazon RDS for MySQL
D. MySQL-compatible Amazon Aurora Multi-AZ
E. Amazon RDS for SQL Server Standard Edition Mufti-AZ
Answer: DE

解决方案架构师正在设计任务关键型Web应用程序。 它将由Amazon EC2组成
Application Load Balancer和关系数据库后面的实例。 数据库应该
高可用性和容错能力。
哪些数据库实现将满足这些要求？ （选择两个。）
A.亚马逊Redshift
B.亚马逊DynamoDB
C.MySQL的Amazon RDS
D.与MySQL兼容的Amazon Aurora Multi-AZ
E.适用于SQL Server Standard Edition Mufti-AZ的Amazon RDS

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

A media company is evaluating the possibility of moving its systems to the AWS Cloud. The
company needs at least 10 TB of storage with the maximum possible I/O performance for video
processing, 300 TB of very durable storage for storing media content, and 900 TB of storage to
meet requirements for archival media that is not in use anymore.
Which set of services should a solutions architect recommend to meet these requirements?
A. Amazon EBS for maximum performance, Amazon S3 for durable data storage, and Amazon S3
Glacier for archival storage
B. Amazon EBS for maximum performance. Amazon EFS for durable data storage, and Amazon S3
Glacier for archival storage
C. Amazon EC2 instance store for maximum performance, Amazon EFS for durable data storage,
and Amazon S3 for archival storage
D. Amazon EC2 instance store for maximum performance, Amazon S3 for durable data storage, and
Amazon S3 Glacier for archival storage
Answer: D
一家媒体公司正在评估将其系统迁移到AWS云的可能性。 的
公司需要至少10 TB的存储，并具有视频的最大I / O性能
处理能力，300 TB的非常耐用的存储空间用于存储媒体内容，以及900 TB的存储空间
满足不再使用的档案媒体的要求。
解决方案架构师应推荐哪些服务来满足这些要求？
A. Amazon EBS提供最佳性能，Amazon S3提供持久性数据存储，Amazon S3
档案存储冰川
B. Amazon EBS，以获得最佳性能。 用于持久数据存储的Amazon EFS和Amazon S3
档案存储冰川
C. Amazon EC2实例存储可实现最佳性能，Amazon EFS可实现持久数据存储，
和Amazon S3用于档案存储
D. Amazon EC2实例存储可实现最佳性能，Amazon S3可实现持久数据存储，以及
Amazon S3 Glacier用于档案存储

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

A company hosts an application on an Amazon EC2 instance that requires a maximum of 200 GB
storage space. The application is used infrequently, with peaks during mornings and evenings.
Disk I/O varies, but peaks at 3,000 IOPS. The chief financial officer of the company is concerned
about costs and has asked a solutions architect to recommend the most cost-effective storage
option that does not sacrifice performance.
Which solution should the solutions architect recommend?
A. Amazon EBS Cold HDD (sc1)
B. Amazon EBS General Purpose SSD (gp2)
C. Amazon EBS Provisioned lOPS SSD (io1)
D. Amazon EBS Throughput Optimized HDD (st1)
Answer: B

一家公司在Amazon EC2实例上托管一个应用程序，该应用程序最多需要200 GB
储存空间。 该应用程序很少使用，在早晨和晚上都有高峰。
磁盘I / O有所不同，但最高达到3,000 IOPS。 有关公司的首席财务官
有关成本的问题，并已要求解决方案架构师推荐最经济高效的存储
不牺牲性能的选择。
解决方案架构师应建议哪种解决方案？
A.Amazon EBS冷硬盘（sc1）
B.Amazon EBS通用SSD（gp2）
C.Amazon EBS预置的lOPS SSD（io1）
D.Amazon EBS吞吐量优化的硬盘（st1）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

A company delivers files in Amazon S3 to certain users who do not have AWS credentials. These
users must be given access for a limited lime. What should a solutions architect do to securely
meet these requirements?
A. Enable public access on an Amazon S3 bucket.
B. Generate a presigned URL to share with the users.
C. Encrypt files using AWS KMS and provide keys to the users.
D. Create and assign IAM roles that will grant GetObject permissions to the users.
Answer: B

一家公司将Amazon S3中的文件交付给某些没有AWS凭证的用户。 这些
必须授予用户使用有限石灰的权限。 解决方案架构师应如何做才能安全
满足这些要求？
A.在Amazon S3存储桶上启用公共访问。
B.生成一个预先签名的URL与用户共享。
C.使用AWS KMS加密文件并向用户提供密钥。
D.创建并分配IAM角色，这些角色将向用户授予GetObject权限。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

A leasing company generates and emails PDF statements every month for all its customers.
Each statement is about 400 KB in size. Customers can download their statements from the
website for up to 30 days from when the statements were generated. At the end of their 3-year
lease, the customers are emailed a ZIP file that contains all the statements.
What is the MOST cost-effective storage solution for this situation?
A. Store the statements using the Amazon S3 Standard storage class. Create a lifecycle policy to
move the statements to Amazon S3 Glacier storage after 1 day.
B. Store the statements using the Amazon S3 Glacier storage class. Create a lifecycle policy to
move the statements to Amazon S3 Glacier Deep Archive storage after 30 days.
Store the statements using the Amazon S3 Standard storage class. Create a lifecycle policy to
move the statements to Amazon S3 One Zone-Infrequent Access (S3 One Zone-lA) storage after
30 days.
D. Store the statements using the Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage
class.
Create a lifecycle policy to move the statements to Amazon S3 Glacier storage after 30 days.
Answer: D
一家租赁公司每月为其所有客户生成并通过电子邮件发送PDF报表。每个语句的大小约为400 KB。
客户可以在生成报表之日起30天内从网站下载其报表。在3年租期结束时，会通过电子邮件向客户发送包含所有对帐单的ZIP文件。对于这种情况，最有成本效益的存储解决方案是什么？
A.使用Amazon S3 Standard存储类存储语句。创建生命周期策略以
1天后将报表移至Amazon S3 Glacier存储。
B.使用Amazon S3 Glacier存储类存储语句。创建生命周期策略以
30天后将报表移至Amazon S3 Glacier Deep Archive存储。
使用Amazon S3 Standard存储类存储语句。创建生命周期策略以
之后将语句移至Amazon S3一次区域不频繁访问（S3 One Zone-lA）存储
30天。
D.使用Amazon S3 Standard-Infrequent Access（S3 Standard-IA）存储存储语句
类。
创建生命周期策略，以在30天后将语句移至Amazon S3 Glacier存储。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

A solutions architect is moving the static content from a public website hosted on Amazon EC2
instances to an Amazon S3 bucket. An Amazon CloudFront distribution will be used to deliver the
static assets. The security group used by the EC2 instances restricts access to a limited set of IP
ranges. Access to the static content should be similarly restricted.
Which combination of steps will meet these requirements? (Select TWO.)
A. Create an origin access identity (OAI) and associate it with the distribution. Change the
permissions in the bucket policy so that only the OAl can read the objects.

A. Create an origin access identity (OAl) and associate it with the distribution. Change the
permissions in the bucket policy so that only the OAI can read the objects.
B. Create an AWS WAF web ACL that includes the same IP restrictions that exist in the EC2
security group. Associate this new web ACL with the CloudFront distribution.

C. Create a new security group that includes the same IP restrictions that exist in the current EC2
security group, Associate this new security group with the CloudFront distribution.
D. Create a new security group that includes the same IP restrictions that exist in the current EC2
security group. Associate this new security group with the S3 bucket hosting the static content.
E. Create a new IAM role and associate the role with the distribution, Change the permissions either
on the S3 bucket or on the files within the S3 bucket so that only the newly created IAM role has
read and download permissions.
Answer: AB

解决方案架构师正在从Amazon EC2上托管的公共网站转移静态内容
实例到Amazon S3存储桶。 Amazon CloudFront发行版将用于交付
静态资产。 EC2实例使用的安全组将访问限制为一组有限的IP
范围。同样，对静态内容的访问也应受到限制。
哪些步骤组合可以满足这些要求？ （选择两个。）
A.创建一个原始访问身份（OAI）并将其与分发关联。改变
存储桶策略中的权限，以便只有OAl可以读取对象。
B.创建一个包含与EC2中相同的IP限制的AWS WAF Web ACL
安全组。将此新的Web ACL与CloudFront分配关联。
C.创建一个新的安全组，其中包括与当前EC2中相同的IP限制
安全组，将此新安全组与CloudFront分配关联。
D.创建一个新的安全组，其中包括与当前EC2中相同的IP限制
安全组。将此新安全组与托管静态内容的S3存储桶相关联。
E.创建一个新的IAM角色并将该角色与分发相关联，或者更改权限
在S3存储桶或S3存储桶中的文件上，以便只有新创建的IAM角色具有
阅读和下载权限。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

A company has a large Microsoft SharePoint deployment running on-premises that requires
Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS
Cloud and is considering various storage options. The storage solution must be highly available
and integrated with Active Directory for access control.
Which solution will satisfy these requirements?
A. Configure Amazon EFS storage and set the Active Directory domain for authentication.
B. Create an SMB file share on an AWS Storage Gateway file gateway in two Availability Zones.
C. Create an Amazon S3 bucket and configure Microsoft Windows Server to mount it as a volume,
D, Create an Amazon FSx for Windows File Server file system on AWS and set the Active Directory
domain for authentication.
Answer: D
公司有一个大型Microsoft SharePoint部署在本地运行，需要Microsoft Windows共享文件存储。 该公司希望将此工作负载迁移到AWS
云，正在考虑各种存储选项。 存储解决方案必须具有高可用性，并且必须与Active Directory集成在一起才能进行访问控制。
哪种解决方案可以满足这些要求？
A.配置Amazon EFS存储并设置Active Directory域以进行身份验证。
B.在两个可用区中的AWS Storage Gateway文件网关上创建SMB文件共享。
C.创建一个Amazon S3存储桶并配置Microsoft Windows Server以将其作为卷安装，
D，在AWS上为Windows文件服务器创建Amazon FSx文件系统并设置Active Directory
用于身份验证的域。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

A company runs multiple Amazon EC2 Linux instances in a VPC with applications that use a
hierarchical directory structure. The applications need to rapidly and concurrently read and write
to shared storage How can this be achieved?
A. Create an Amazon EFS file system and mount it from each EC2 instance,
B. Create an Amazon S3 bucket and permit access from all the EC2 instances in the VPC.
C. Create a file system on an Amazon EBS Provisioned lOPS SSD (io1) volume. Attach the volume
to all the EC2 instances.
D. Create file systems on Amazon EBS volumes attached to each EC2 instance. Synchronize the
Amazon EBS volumes across the different EC2 instances.
Answer: A
一家公司在VPC中使用使用分层目录结构的应用程序运行多个Amazon EC2 Linux实例。应用程序需要快速并发地对共享存储进行读写操作如何实现？ 
A.创建一个Amazon EFS文件系统并从每个EC2实例安装它，
B。创建一个Amazon S3存储桶并允许从VPC中的所有EC2实例进行访问。 
C.在Amazon EBS预置的lOPS SSD（io1）卷上创建文件系统。将卷附加到所有EC2实例。 
D.在附加到每个EC2实例的Amazon EBS卷上创建文件系统。在不同的EC2实例之间同步Amazon EBS卷。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

A company runs an application using Amazon ECS. The application creates resized versions of
an original image and then makes Amazon S3 API calls to store the resized images in Amazon
S3. How can a solutions architect ensure that the application has permission to access Amazon
S3?
A. Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch
the container.
B. Create an IAM role with S3 permissions, and then specify that role as the taskRoleArn in the task
definition.
C. Create a security group that allows access from Amazon ECS to Amazon S3, and update the
launch configuration used by the ECS cluster.
D. Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the
ECS cluster while logged in as this account.
Answer: B
一家公司使用Amazon ECS运行应用程序。该应用程序创建原始图像的调整大小版本，然后进行Amazon S3 API调用以将调整大小的图像存储在Amazon S3中。
解决方案架构师如何确保应用程序有权访问Amazon S3？ 
A.更新AWS IAM中的S3角色以允许从Amazon ECS进行读/写访问，然后重新启动该容器。 B.创建一个具有S3权限的IAM角色，然后在任务定义中将该角色指定为taskRoleArn。 
C.创建一个安全组，该安全组允许从Amazon ECS到Amazon S3的访问，并更新ECS集群使用的启动配置。 D.创建具有S3权限的IAM用户，然后以该帐户身份登录时重新启动ECS集群的Amazon EC2实例。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

A solutions architect has configured the following IAM policy.
1
"Vereicn": "2012-10-17",
"statement":[
"Effect": "Allow",
"Action":[
"lambda:
l,
"Resource": "*"
1,
"Effect": "Deny",
"Action":[
"lambda:CreateFuncti on" ,
"lambda: De leteFunction"
1,
"Resource": "*",
"Condition": (
"IpAddress": (
"ave:SourceIp": "220.100.16. 0/20"
)
Which action will be allowed by the policy?
A. An AWS Lambda function can be deleted from any network.
B. An AWS Lambda function can be created from any network.
C. An AWS Lambda function can be deleted from the 100.220.0.0/20 network.
D. An AWS Lambda function can be deleted from the 220.100.16.0/20 network
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

A website runs a web application that receives a burst of traffic each day at noon. The users
upload new pictures and content daily, but have been complaining of timeouts. The architecture
uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minute
to initiate upon boot up before responding to user requests.
How should a solutions architect redesign the architecture to better respond to changing traffic?
A. Configure a Network Load Balancer with a slow start configuration,
B. Configure AWS ElastiCache for Redis to offload direct requests to the servers.
C. Configure an Auto Scaling step scaling policy with an instance warmup condition.
D. Configure Amazon CloudFront to use an Application Load Balancer as the origin.
Answer: C
一个网站运行一个Web应用程序，该应用程序每天中午都会收到大量流量。用户每天上传新图片和新内容，但一直抱怨超时。
该架构使用Amazon EC2 Auto Scaling组，并且自定义应用程序始终在启动时花费1分钟在响应用户请求之前启动。解决方案架构师应如何重新设计架构，以更好地响应不断变化的流量？ 
A.使用慢启动配置配置网络负载平衡器，B。配置Redis的AWS ElastiCache将直接请求卸载到服务器。 
C.使用实例预热条件配置Auto Scaling步骤扩展策略。 D.将Amazon CloudFront配置为使用应用程序负载均衡器作为源

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

A company has a website running on Amazon EC2 instances across two Availability Zones, The
company is expecting spikes in traffic on specific holidays, and wants to provide a consistent user
experience. How can a solutions architect meet this requirement?
A. Use step scaling.
g B. Use simple scaling.
C
Use lifecycle hooks.
D. Use scheduled scaling,
Answer: D

一家公司在两个可用区上的Amazon EC2实例上运行着一个网站，该公司预计特定假期的流量会激增，并希望提供一致的用户体验。解决方案架构师如何满足此要求？答：使用逐步缩放。 g B.使用简单缩放。 C使用生命周期挂钩。 D.使用预定的缩放

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

A company's web application is running on Amazon EC2 instances behind an Application Load
Balancer. The company recently changed its policy, which ñow requires the application to be
accessed from one specific country only.
Which configuration will meet this requirement?
A. Configure the security group for the EC2 instances.
B. Configure the security group on the Application Load Balancer.
C. Configure AWS WAF on the Application Load Balancer in a VPC.
D. Configure the network ACL for the subnet that contains the EC2 instances.
公司的Web应用程序在Application Load Balancer后面的Amazon EC2实例上运行。
该公司最近更改了政策，现在只需要从一个特定国家/地区访问该应用程序即可。哪种配置可以满足此要求？ 
A.为EC2实例配置安全组。 B.在应用程序负载平衡器上配置安全组。 C.在VPC中的Application Load Balancer上配置AWS WAF。 D.为包含EC2实例的子网配置网络ACL
Answer: C

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

A company has 150 TB of archived image data stored on-premises that needs to be mowed to
the AWS Cloud within the next month. The company's current network connection allows up to
100 Mbps uploads for this purpose during the night only.
What is the MOST cost-effective mechanism to move this data and meet the migration deadline?
A. Use AWS Snowmobile to ship the data to AWS.
B. Order multiple AWS Snowball devices to ship the data to AWS.
C. Enable Amazon S3 Transfer Acceleration and securely upload the data.
D. Create an Amazon S3 VPC endpoint and establish a VPN to upload the data.
Answer: B
一家公司在本地存储了150 TB的存档图像数据，需要在下个月内将其修剪到AWS云中。该公司当前的网络连接仅在夜间允许最多100 Mbps的上传。 什么是最有成本效益的机制来移动此数据并在迁移截止日期之前完成？ A.使用AWS Snowmobile将数据运送到AWS。 B.订购多个AWS Snowball设备以将数据发送到AWS。 C.启用Amazon S3 Transfer Acceleration并安全地上传数据。 D.创建一个Amazon S3 VPC终端节点并建立一个VPN以上传数据。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17