AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 1)
A company is running an Apache Hadoop cluster on Amazon EC2 instances. The Hadoop cluster stores approximately 100 TB of data for weekly operational reports and allows occasional access for data scientists to retrieve data. The company needs to reduce the cost and operational complexity for storing and serving this data.
Which solution meets these requirements in the MOST cost-effective manner?

1. A. Move the Hadoop cluster from EC2 instances to Amazon EM
2. B. Allow data access patterns to remain the same.
3. C. Write a script that resizes the EC2 instances to a smaller instance type during downtime and resizes the instances to a larger instance type before the reports are created.
4. D. Move the data to Amazon S3 and use Amazon Athena to query the data for report
5. E. Allow the data scientists to access the data directly in Amazon S3.
6. F. Migrate the data to Amazon DynamoDB and modify the reports to fetch data from DynamoD
7. G. Allow the data scientists to access the data directly in DynamoDB.

Correct Answer: C
"The company needs to reduce the cost and operational complexity for storing and serving this data. Which solution meets these requirements in the MOST cost-effective manner?" EMR storage is ephemeral. The company has 100TB that need to persist, they would have to use EMRFS to backup to S3 anyway. https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-storage.html
100TB
EBS - 8.109$ S3 - 2.355$
You have saved 5.752$
This amount can be used for Athen. BTW. we don't know indexes, amount of data that is scanned. What we know is that tit will be: "occasional access for data scientists to retrieve data"

- (Exam Topic 2)
A company is using multiple AWS accounts The DNS records are stored in a private hosted zone for Amazon Route 53 in Account A The company's applications and databases are running in Account B.
A solutions architect win deploy a two-net application In a new VPC To simplify the configuration, the db.example com CNAME record set tor the Amazon RDS endpoint was created in a private hosted zone for
Amazon Route 53.
During deployment, the application failed to start. Troubleshooting revealed that db.example com is not resolvable on the Amazon EC2 instance The solutions architect confirmed that the record set was created correctly in Route 53.
Which combination of steps should the solutions architect take to resolve this issue? (Select TWO J

1. A. Deploy the database on a separate EC2 instance in the new VPC Create a record set for the instance's private IP in the private hosted zone
2. B. Use SSH to connect to the application tier EC2 instance Add an RDS endpoint IP address to the/eto/resolv.conf file
3. C. Create an authorization lo associate the private hosted zone in Account A with the new VPC In Account B
4. D. Create a private hosted zone for the example.com domain m Account B Configure Route 53 replication between AWS accounts
5. E. Associate a new VPC in Account B with a hosted zone in Account
6. F. Delete the association authorization In Account A.

Correct Answer: CE
https://aws.amazon.com/premiumsupport/knowledge-center/private-hosted-zone-different-account/

- (Exam Topic 1)
A company wants to migrate a 30 TB Oracle data warehouse from on premises to Amazon Redshift The company used the AWS Schema Conversion Tool (AWS SCT) to convert the schema of the existing data warehouse to an Amazon Redshift schema The company also used a migration assessment report to identify manual tasks to complete.
The company needs to migrate the data to the new Amazon Redshift cluster during an upcoming data freeze period of 2 weeks The only network connection between the on-premises data warehouse and AWS is a 50 Mops internet connection
Which migration strategy meets these requirements?

1. A. Create an AWS Database Migration Service (AWS DMS) replication instanc
2. B. Authorize the public IP address of the replication instance to reach the data warehouse through the corporate firewall Create a migration task to run at the beginning of the data freeze period.
3. C. Install the AWS SCT extraction agents on the on-premises server
4. D. Define the extract, upload, and copy tasks to send the data to an Amazon S3 bucke
5. E. Copy the data into the Amazon Redshift cluste
6. F. Run the tasks at the beginning of the data freeze period.
7. G. install the AWS SCT extraction agents on the on-premises server
8. H. Create a Site-to-Site VPN connection Create an AWS Database Migration Service (AWS DMS) replication instance that is the appropriate size Authorize the IP address of the replication instance to be able to access the on-premises data warehouse through the VPN connection
9. I. Create a job in AWS Snowball Edge to import data into Amazon S3 Install AWS SCT extraction agents on the on-premises servers Define the local and AWS Database Migration Service (AWS DMS) tasks to send the data to the Snowball Edge device When the Snowball Edge device is returned to AWS and the data is available in Amazon S3, run the AWS DMS subtask to copy the data to Amazon Redshift.

Correct Answer: D
AWS Database Migration Service (AWS DMS) can use Snowball Edge and Amazon S3 to migrate large databases more quickly than by other methods https://docs.aws.amazon.com/dms/latest/userguide/CHAP_LargeDBs.html
https://www.calctool.org/CALC/prof/computing/transfer_time

- (Exam Topic 2)
A company is in the process of implementing AWS Organizations to constrain its developers to use only Amazon EC2. Amazon S3 and Amazon DynamoDB. The developers account resides In a dedicated organizational unit (OU). The solutions architect has implemented the following SCP on the developers account:

When this policy is deployed, IAM users in the developers account are still able to use AWS services that are not listed in the policy. What should the solutions architect do to eliminate the developers' ability to use services outside the scope of this policy?

1. A. Create an explicit deny statement for each AWS service that should be constrained
2. B. Remove the Full AWS Access SCP from the developer account's OU
3. C. Modify the Full AWS Access SCP to explicitly deny all services
4. D. Add an explicit deny statement using a wildcard to the end of the SCP

Correct Answer: B

- (Exam Topic 1)
A company requires that all internal application connectivity use private IP addresses. To facilitate this policy, a solutions architect has created interface endpoints to connect to AWS public services. Upon testing, the solutions architect notices that the service names are resolving to public IP addresses, and that internal services cannot connect to the interface endpoints.
Which step should the solutions architect take to resolve this issue?

1. A. Update the subnet route table with a route to the interface endpoint.
2. B. Enable the private DNS option on the VPC attributes.
3. C. Configure the security group on the interface endpoint to allow connectivity to the AWS services.
4. D. Configure an Amazon Route 53 private hosted zone with a conditional forwarder for the internal application.

Correct Answer: C
https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html