A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS.Which activities will be managed by the company's operational team? (Choose three.)
Answer(s): B,C,F
The three correct activities are B, C, and F.A) Incorrect: RDS is a managed service; AWS handles infrastructure, OS, and platform management. The customer does not manage RDS underlying layers.B) Correct: Creating a DB instance and configuring maintenance windows are customer responsibilities for RDS provisioning and maintenance windows.C) Correct: On ECS, customers manage monitoring, patch management, log management, and host security tooling for their containerized workloads.F) Correct: Encrypting data in transit via Direct Connect is the customer responsibility to ensure secure network transport.D) Incorrect: AWS handles DB engine patches and major/minor version upgrades for RDS; customers scheduling non-scheduled patches aren’t typical.E) Incorrect: Physical data center security is AWS responsibility; customers don’t manage data center security.
A company runs a Java-based job on an Amazon EC2 instance. The job runs every hour and takes 10 seconds to run. The job runs on a scheduled interval and consumes 1 GB of memory. The CPU utilization of the instance is low except for short surges during which the job uses the maximum CPU available. The company wants to optimize the costs to run the job.Which solution will meet these requirements?
Answer(s): B
The correct answer is B. Lambda with 1 GB memory and EventBridge scheduling meets the hourly, 10-second, low-constant CPU workload with minimal management and cost; Lambda charges per invocation and duration, and the 1 GB memory setting supports peak CPU during execution without provisioning servers.A is incorrect because 0.5 vCPU may under-provision for bursts, and Fargate-based ECS adds container orchestration cost for such a short, infrequent task; Lambda is typically cheaper for this pattern.C is incorrect because keeping a container on a fixed AMI increases management overhead and idle cost.D is incorrect because stopping and restarting an EC2 instance introduces cold-start delays and inefficiency for a microtask that runs every hour.
A company wants to implement a backup strategy for Amazon EC2 data and multiple Amazon S3 buckets. Because of regulatory requirements, the company must retain backup files for a specific time period. The company must not alter the files for the duration of the retention period.Which solution will meet these requirements?
Answer(s): D
AWS Backup with a vault lock in compliance mode provides immutability for backups, meeting regulatory retention and non-alteration requirements; it prevents any modification or deletion during the retention period. A) Governance mode allows protection but not immutability for the full retention window. B) Data Lifecycle Manager handles EC2 snapshots but does not provide cross-service immutable backups or S3 bucket immutability. C) S3 File Gateway with Lifecycle a) manages object tiers, not immutable retention. D) Correct combines AWS Backup vault lock in compliance mode with a retention policy for both EC2 and S3 data.
A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts.Which solution will meet these requirements in the MOST operationally efficient way?
Answer(s): C
A) AWS Systems Manager Inventory is useful for collecting instance and software inventory but does not automatically generate architecture diagrams or cross-account, cross-region workload relationship maps.B) Step Functions orchestrates workflows, not automatic discovery of workloads or architecture diagrams; manual diagramming is required.C) Workload Discovery on AWS provides automated discovery of workloads across accounts and regions and generates architecture diagrams with relationships, satisfying multi-account/multi-region discovery with operational efficiency.D) AWS X-Ray traces requests within applications but is not a cross-account inventory or architecture diagram tool; it focuses on distributed tracing rather than full workload discovery.
A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period.Which combination of solutions will meet these requirements? (Choose three.)
Answer(s): B,D,F
AWS Budgets can alert at the Billing dashboards level and budget actions can be implemented via an IAM role to perform the required guardrails, while SCPs can enforce prevent-provisioning across accounts in AWS Organizations. Therefore B, D, and F correctly configure budgets, grant reusable IAM role-based permissions for budget actions, and use SCPs to enforce restrictions to stop provisioning when thresholds are reached.A is incorrect because budgets are configured at the Billing dashboards level, not under Cost and Usage Reports per account. C is incorrect because Budgets actions require a role, not an IAM user. E is incorrect because using an IAM identity alone without SCPs or proper centralized enforcement does not guarantee prevention of provisioning.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.