A company sells datasets to customers who do research in artificial intelligence and machine learning (Al/ML) The datasets are large, formatted files that are stored in an Amazon S3 bucket in the us-east-1 Region The company hosts a web application that the customers use to purchase access to a given dataset The web application is deployed on multiple Amazon EC2 instances behind an Application Load Balancer After a purchase is made customers receive an S3 signed URL that allows access to the files.
The customers are distributed across North America and Europe The company wants to reduce the cost that is associated with data transfers and wants to maintain or improve performance.
What should a solutions architect do to meet these requirements?

• A.Modify the web application to enable streaming of the datasets to end users Configure the web application to read the data from the existing S3 bucket Implement access control directly in the application
• B.Deploy an Amazon CloudFront distribution with the existing S3 bucket as the origin Direct customer requests to the CloudFront URL Switch to CloudFront signed URLs for access control
• C.Set up a second S3 bucket in the eu-central-1 Region with S3 Cross-Region Replication between the buckets Direct customer requests to the closest Region Continue to use S3 signed URLs for access control
• D.Configure S3 Transfer Acceleration on the existing S3 bucket Direct customer requests to the S3 Transfer Acceleration endpoint Continue to use S3 signed URLs for access control

Comment: *

Name: *

Email: *

Verification: *

A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes.
Which solution will meet these requirements with the LEAST operational overhead?

• A.Configure AWS Config with a rule to report the incomplete multipart upload object count.
• B.Create a service control policy (SCP) to report the incomplete multipart upload object count.
• C.Configure S3 Storage Lens to report the incomplete multipart upload object count.
• D.Create an S3 Multi-Region Access Point to report the incomplete multipart upload object count.

Comment: *

Name: *

Email: *

Verification: *

Can I test my DB Instance against a new version before upgrading?

• A.Only in VPC
• B.Yes
• C.No

Comment: *

Name: *

Email: *

Verification: *

A client notices that their engineers often make mistakes when creating Amazon SQS queues for their backend system.
Which action should a Solutions Architect recommend to improve this process?

• A.Use the AWS CLI to create queues using AWS 1AM Access Keys.
• B.Write a script to create the Amazon SQS queue using AWS Lambda.
• C.Use AWS Elastic Beanstalk to automatically create the Amazon SQS queues.
• D.Use AWS CloudFormation Templates to manage the Amazon SQS queue creation.

Comment: *

Name: *

Email: *

Verification: *

An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2 Instances.
The customers security policy requires that every outbound connection from these instances to any other service within the customers Virtual Private Cloud must be authenticated using a unique x 509 certificate that contains the specific instance-id.
In addition an x 509 certificates must Designed by the customer's Key management service in order to be trusted for authentication.
Which of the following configurations will support these requirements?

• A.Configure an lAM Role that grants access to an Amazon 53 object containing a signed certificate and configure me Auto Scaling group to launch instances with this role Have the instances bootstrap get the certificate from Amazon 53 upon first boot.
• B.Embed a certificate into the Amazon Machine Image that is used by the Auto Scaling group Have the launched instances generate a certificate signature request with the instance's assigned instance- id to the Key management service for signature.
• C.Configure the launched instances to generate a new certificate upon first boot Have the Key management service poll the AutoScaling group for associated instances and send new instances a certificate signature (hat contains the specific instance-id.
• D.Configure the Auto Scaling group to send an SNS notification of the launch of a new instance to the trusted key management service. Have the Key management service generate a signed certificate and send it directly to the newly launched instance.

Comment: *

Name: *

Email: *

Verification: *