A company is creating an application that runs on containers in a VPC. The application stores and accesses data in an Amazon S3 bucket. During the development phase, the application will store and access 1 TB of data in Amazon S3 each day. The company wants to minimize costs and wants to prevent traffic from traversing the internet whenever possible.Which solution will meet these requirements?
Answer(s): C
The correct answer is C. A gateway VPC endpoint for S3 provides private, regional access to S3 from the VPC without traversing the internet, and by associating it with all route tables, all traffic to S3 stays within the AWS network, reducing egress costs.A) S3 Intelligent-Tiering reduces storage costs, not data transfer or network path; it doesn’t prevent internet traversal. B) S3 Transfer Acceleration optimizes cross-region or long-distance transfers over CloudFront; it increases cost and still uses public internet paths between regions. D) Interface endpoints for S3 (powered by PrivateLink) incur higher per-ENI and data transfer costs and are not necessary for S3 access from within the same region; gateway endpoints are more cost-efficient for S3 in VPC.
A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be read with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes.Which method should the solutions architect select?
Answer(s): A
D) A) is correct because DynamoDB Accelerator (DAX) provides in-memory caching for DynamoDB with API compatibility, delivering microsecond latency for read-heavy workloads with minimal code changes by routing through the DAX endpoint. B) is incorrect: DynamoDB read replicas are not a supported feature; DynamoDB uses global tables or on-demand scaling, and you cannot point a read to a replica endpoint. C) is suboptimal: simply increasing RCUs can help but introduces higher costs and still incurs DynamoDB read latency, especially under bursty mobile usage. D) is incorrect: ElastiCache adds an external cache but requires significant application logic changes to swap DB calls, increasing latency and complexity.
A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing, and the company is concerned about a potential increase in cost.
CloudFront caches static content at edge locations, reducing origin fetches and data transfer from the ALB/EC2, lowering costs for serving static assets. A) correct.B) ElastiCache is for in-memory caching of dynamic application data, not for serving static website content or reducing global load; it does not integrate with ALB in this caching role.C) WAF blocks or filters traffic, not designed to cache content; it cannot cache static files as a cost-reduction mechanism.D) Multi-region routing adds complexity and can introduce higher inter-region data transfer costs; it does not inherently reduce costs for static content delivery.
A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in other Regions. Because of a recent application launch requirement, the company’s VPCs must communicate with all other VPCs across all Regions.Which solution will meet these requirements with the LEAST amount of administrative effort?
Transit Gateway provides centralized inter-VPC connectivity and can be peered across Regions to enable full mesh across all VPCs with minimal management. Correct: CA) VPC peering across multiple VPCs and Regions becomes complex to manage at scale (N^2 connections and manual provisioning); no centralized control.B) Direct Connect Gateways are for on-premises private connectivity, not scalable VPC-to-VPC inter-region.D) PrivateLink is for service access within or across accounts/regions but is designed for consumer-service interfaces, not full VPC-to-VPC mesh; scaling across many VPCs is impractical.
A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target m each Availability Zone within a Region.A solutions architect wants to use AWS Backup to manage the replication to another Region.Which solution will meet these requirements?
EFS with Standard storage class provides scalable, highly durable shared storage with regional replication via AWS Backup, supporting recovery targets like 8-hour RPO and one mount target per AZ. EFS is NFS-compatible for ECS tasks and can be mounted across AZs, meeting durability and accessibility requirements. Option A FSx for Windows File Server is Windows-specific and Multi-AZ does not inherently offer cross-region replication with an 8-hour RPO via Backup. Option B FSx for NetApp ONTAP supports replication but is more complex and not the typical choice for ECS-native shared POSIX file systems. Option D FSx OpenZFS is not a managed cross-region replication solution via AWS Backup and lacks native ECS-ready NFS semantics.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.