A company produces batch data that comes from different databases. The company also produces live stream data from network sensors and application APIs. The company needs to consolidate all the data into one place for business analytics. The company needs to process the incoming data and then stage the data in different Amazon S3 buckets. Teams will later run one-time queries and import the data into a business intelligence tool to show key performance indicators (KPIs).Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)
Answer(s): A,E
The correct answer is A and E because they provide serverless, low-management data analytics with centralized storage in S3 and efficient querying/visualization. A) Athena enables ad-hoc, one-time queries directly on S3 data, and QuickSight creates KPI dashboards without moving data. E) Lake Formation blueprints simplify data discovery and ingestion, Glue crawlers catalog and ETL into S3 in Apache Parquet, enabling cost-effective, query-optimized storage for analytics. B is higher overhead with Kinesis Data Analytics for ad-hoc queries and doesn’t directly optimize storage formats. C uses custom ETL with Redshift, increasing maintenance. D loads to OpenSearch clusters, not ideal for BI KPIs.
A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)
Answer(s): D,E
The correct combination ensures long-term audit logs and fixed 5-year data retention using AWS-native controls. D) Configuring an Amazon CloudWatch Logs export for the DB cluster preserves database activity logs indefinitely in CloudWatch Logs, meeting audit retention. E) Using AWS Backup to take and retain backups for 5 years enforces immutable, long-term storage beyond automated DB backups and provides centralized lifecycle management. A) Manual snapshots are not automated retention; B) Lifecycle policy for automated backups is not a defined feature; C) Automated backup retention only applies to retention period, not indefinite audit logging.
A solutions architect is optimizing a website for an upcoming musical event. Videos of the performances will be streamed in real time and then will be available on demand. The event is expected to attract a global online audience.Which service will improve the performance of both the real-time and on-demand streaming?
Answer(s): A
CloudFront leverages a global CDN to cache and deliver both real-time (live) streaming with low latency and on-demand video from edge locations, improving performance for a worldwide audience. It integrates with streaming services and supports adaptive bitrate for live feeds and on-demand content delivery.A) CloudFront: Correct — global CDN reduces latency for both live and on-demand video.B) AWS Global Accelerator: Optimizes path to applications but not specifically content caching for media; not ideal for streaming media delivery at scale.C) Route 53: DNS routing, not content delivery or caching for media streams.D) S3 Transfer Acceleration: Accelerates uploads/downloads to S3, not optimized streaming delivery.
A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application’s traffic recently spiked due to fraudulent requests from botnets.Which steps should a solutions architect take to block requests from unauthorized users? (Choose two.)
Answer(s): A,C
A) Implementing a usage plan with an API key helps restrict access to genuine users and controls quota for the public API, reducing exposure to unauthorized requests.C) An AWS WAF rule targets malicious traffic (e.g., botnets) at the API Gateway level and can block or rate-limit such requests, mitigating fraudulent traffic before Lambda invocation.B) Lambda logic to ignore fraudulent IPs is ineffective, as IP spoofing and botnets can evade simple checks and adds processing cost; defense should occur at edge/security layer.D) Converting to a private API with DNS redirection would disrupt legitimate users and is not suitable for a public-facing service requiring controlled access.E) Creating an IAM role per user is impractical for public APIs and does not scale; API Gateway IAM is not intended for per-user authentication in this context.
An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.Which solution meets these requirements MOST cost-effectively?
Answer(s): C
The correct answer is C) Amazon S3 Standard. It provides durable object storage with millisecond access and suits 30-day retention for JSON data at the lowest cost for frequently accessed backups. S3 Standard offers high durability and availability, meeting DR needs without retrieval delays or extra restore steps.A) Amazon OpenSearch Service is a search/analytics service, not a cost-effective backup store for 30 days with millisecond access. It adds unnecessary compute and indexing costs.B) Amazon S3 Glacier is archival storage with retrieval latency ranging from minutes to hours, not millisecond access, and is unsuitable for frequent access.D) Amazon RDS for PostgreSQL is a relational database service, not a blob storage solution for backups, incurring higher cost and complexity for this use case.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members: