A company's web application consists of an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function handles the business logic, and the DynamoDB table hosts the data. The application uses Amazon Cognito user pools to identify the individual users of the application. A solutions architect needs to update the application so that only users who have a subscription can access premium content.

• A.Apply fine-grained IAM permissions to the premium content in the DynamoDB table
• B.Enable API caching and throttling on the API Gateway API
• C.Implement API usage plans and API keys to limit the access of users who do not have a subscription.
• D.Set up AWS WAF on the API Gateway API Create a rule to filter users who have a subscription

Comment: *

Name: *

Email: *

Verification: *

A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage.
The application tier is hosted on Amazon EC2 instances. The company's IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days What should a solutions architect do to meet this requirement with the LEAST operational effort?

• A.Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon S3 bucket that the application uses to load the credentials Download the file to the application regularly to ensure that the correct credentials are used Implement an AWS Lambda function that rotates the Aurora credentials every 14 days and uploads these credentials to the file in the S3 bucket
• B.Create two parameters in AWS Systems Manager Parameter Store one for the user name as a string parameter and one that uses the SecureStnng type for the password Select AWS Key Management Service (AWS KMS) encryption for the password parameter, and load these parameters in the application tier Implement an AWS Lambda function that rotates the password every 14 days.
• C.Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon Elastic File System (Amazon EFS) file system Mount the EFS file system in all EC2 instances of the application tier. Restrict the access to the file on the file system so that the application can read the file and that only super users can modify the file Implement an AWS Lambda function that rotates the key in Aurora every 14 days and writes new credentials into the file
• D.Create a new AWS Key Management Service (AWS KMS) encryption key Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials Associate the secret with the Aurora DB cluster Configure a custom rotation period of 14 days

Comment: *

Name: *

Email: *

Verification: *

A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to the production DB instance.
Which solution meets these requirements?

• A.Deploy the OB distance in multiple Availability Zones to process the business reporting queries
• B.Scale up the DB instance to a larger instance type to handle write operations and queries
• C.Scale out the DB instance horizontally by placing it behind an Elastic Load Balancer
• D.Deploy RDS read replicas to process the business reporting queries.

Comment: *

Name: *

Email: *

Verification: *

A company's application runs on AWS. The application stores large documents in an Amazon S3 bucket that uses the S3 Standard-infrequent Access (S3 Standerd-IA) storage class. The company will continue paying to store the data but wants to save on its total S3 costs. The company wants authorized external users to have the ability to access the documents in milliseconds.
Which solution will meet these requirements MOST cost-effectively?

• A.Use Amazon CloudFront to handle all the requests to the S3 bucket
• B.Configure the S3 bucket to be a Requester Pays bucket
• C.Turn on S3 Transfer Acceleration tor the S3 Docket
• D.Change the storage tier to S3 Standard for all existing and future objects.

Comment: *

Name: *

Email: *

Verification: *

A company has an on-premises MySQL database used by the global tales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrate wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users In the future.
Which service should a solutions architect recommend?

• A.Amazon Aurora MySQL
• B.Amazon Aurora Serverless tor MySQL
• C.Amazon Redshift Spectrum
• D.Amazon RDS for MySQL

Comment: *

Name: *

Email: *

Verification: *