🔍

SAA-C03 — questions

Page 6 of 51 · 1019 total questions.

SAA-C03 Question 101

Single page →
Topic 1 · Question 101

A solutions architect is designing a VPC with public and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability. An internet gateway is used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates. What should the solutions architect do to enable Internet access for the private subnets?

  • ACreate three NAT gateways, one for each public subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT gateway in its AZ. (correct answer)
  • BCreate three NAT instances, one for each private subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT instance in its AZ.
  • CCreate a second internet gateway on one of the private subnets. Update the route table for the private subnets that forward non-VPC traffic to the private internet gateway.
  • DCreate an egress-only internet gateway on one of the public subnets. Update the route table for the private subnets that forward non-VPC traffic to the egress-only Internet gateway.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create three NAT gateways, one for each public subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT gateway in its AZ.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. A NAT gateway lets private subnet resources reach the internet for outbound traffic only.

SAA-C03 Question 102

Single page →
Topic 1 · Question 102 · Select all that apply

A company wants to migrate an on-premises data center to AWS. The data center hosts an SFTP server that stores its data on an NFS-based file system. The server holds 200 GB of data that needs to be transferred. The server must be hosted on an Amazon EC2 instance that uses an Amazon Elastic File System (Amazon EFS) file system. Which combination of steps should a solutions architect take to automate this task? (Choose two.)

  • ALaunch the EC2 instance into the same Availability Zone as the EFS file system.
  • BInstall an AWS DataSync agent in the on-premises data center. (correct answer)
  • CCreate a secondary Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instance for the data.
  • DManually use an operating system copy command to push the data to the EC2 instance.
  • EUse AWS DataSync to create a suitable location configuration for the on-premises SFTP server. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Install an AWS DataSync agent in the on-premises data center. Option E: Use AWS DataSync to create a suitable location configuration for the on-premises SFTP server.

Explanation

AWS DataSync automates and accelerates online data transfer to AWS with minimal effort. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 103

Single page →
Topic 1 · Question 103

A company has an AWS Glue extract, transform, and load (ETL) job that runs every day at the same time. The job processes XML data that is in an Amazon S3 bucket. New data is added to the S3 bucket every day. A solutions architect notices that AWS Glue is processing all the data during each run. What should the solutions architect do to prevent AWS Glue from reprocessing old data?

  • AEdit the job to use job bookmarks. (correct answer)
  • BEdit the job to delete data after the data is processed.
  • CEdit the job by setting the NumberOfWorkers field to 1.
  • DUse a FindMatches machine learning (ML) transform.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Edit the job to use job bookmarks.

SAA-C03 Question 104

Single page →
Topic 1 · Question 104 · Select all that apply

A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website. Which actions should the solutions architect take to protect the website from such an attack? (Choose two.)

  • AUse AWS Shield Advanced to stop the DDoS attack. (correct answer)
  • BConfigure Amazon GuardDuty to automatically block the attackers.
  • CConfigure the website to use Amazon CloudFront for both static and dynamic content. (correct answer)
  • DUse an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
  • EUse EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Use AWS Shield Advanced to stop the DDoS attack. Option C: Configure the website to use Amazon CloudFront for both static and dynamic content.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Shield provides managed DDoS protection. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 105

Single page →
Topic 1 · Question 105

A company is preparing to deploy a new serverless workload. A solutions architect must use the principle of least privilege to configure permissions that will be used to run an AWS Lambda function. An Amazon EventBridge (Amazon CloudWatch Events) rule will invoke the function. Which solution meets these requirements?

  • AAdd an execution role to the function with lambda:InvokeFunction as the action and * as the principal.
  • BAdd an execution role to the function with lambda:InvokeFunction as the action and Service: lambda.amazonaws.com as the principal.
  • CAdd a resource-based policy to the function with lambda:* as the action and Service: events.amazonaws.com as the principal.
  • DAdd a resource-based policy to the function with lambda:InvokeFunction as the action and Service: events.amazonaws.com as the principal. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Add a resource-based policy to the function with lambda:InvokeFunction as the action and Service: events.amazonaws.com as the principal.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

SAA-C03 Question 106

Single page →
Topic 1 · Question 106

A company is preparing to store confidential data in Amazon S3. For compliance reasons, the data must be encrypted at rest. Encryption key usage must be logged for auditing purposes. Keys must be rotated every year. Which solution meets these requirements and is the MOST operationally efficient?

  • AServer-side encryption with customer-provided keys (SSE-C)
  • BServer-side encryption with Amazon S3 managed keys (SSE-S3)
  • CServer-side encryption with AWS KMS keys (SSE-KMS) with manual rotation
  • DServer-side encryption with AWS KMS keys (SSE-KMS) with automatic rotation (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Server-side encryption with AWS KMS keys (SSE-KMS) with automatic rotation

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 107

Single page →
Topic 1 · Question 107

A bicycle sharing company is developing a multi-tier architecture to track the location of its bicycles during peak operating hours. The company wants to use these data points in its existing analytics platform. A solutions architect must determine the most viable multi-tier option to support this architecture. The data points must be accessible from the REST API. Which action meets these requirements for storing and retrieving location data?

  • AUse Amazon Athena with Amazon S3.
  • BUse Amazon API Gateway with AWS Lambda.
  • CUse Amazon QuickSight with Amazon Redshift.
  • DUse Amazon API Gateway with Amazon Kinesis Data Analytics. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon API Gateway with Amazon Kinesis Data Analytics.

Explanation

Amazon Kinesis ingests and processes real-time streaming data at scale. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale.

SAA-C03 Question 108

Single page →
Topic 1 · Question 108

A company has an automobile sales website that stores its listings in a database on Amazon RDS. When an automobile is sold, the listing needs to be removed from the website and the data must be sent to multiple target systems. Which design should a solutions architect recommend?

  • ACreate an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) queue for the targets to consume. (correct answer)
  • BCreate an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) FIFO queue for the targets to consume.
  • CSubscribe to an RDS event notification and send an Amazon Simple Queue Service (Amazon SQS) queue fanned out to multiple Amazon Simple Notification Service (Amazon SNS) topics. Use AWS Lambda functions to update the targets.
  • DSubscribe to an RDS event notification and send an Amazon Simple Notification Service (Amazon SNS) topic fanned out to multiple Amazon Simple Queue Service (Amazon SQS) queues. Use AWS Lambda functions to update the targets.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) queue for the targets to consume.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

SAA-C03 Question 109

Single page →
Topic 1 · Question 109

A company needs to store data in Amazon S3 and must prevent the data from being changed. The company wants new objects that are uploaded to Amazon S3 to remain unchangeable for a nonspecific amount of time until the company decides to modify the objects. Only specific users in the company's AWS account can have the ability 10 delete the objects. What should a solutions architect do to meet these requirements?

  • ACreate an S3 Glacier vault. Apply a write-once, read-many (WORM) vault lock policy to the objects.
  • BCreate an S3 bucket with S3 Object Lock enabled. Enable versioning. Set a retention period of 100 years. Use governance mode as the S3 bucket’s default retention mode for new objects.
  • CCreate an S3 bucket. Use AWS CloudTrail to track any S3 API events that modify the objects. Upon notification, restore the modified objects from any backup versions that the company has.
  • DCreate an S3 bucket with S3 Object Lock enabled. Enable versioning. Add a legal hold to the objects. Add the s3:PutObjectLegalHold permission to the IAM policies of users who need to delete the objects. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an S3 bucket with S3 Object Lock enabled. Enable versioning. Add a legal hold to the objects. Add the s3:PutObjectLegalHold permission to the IAM policies of users who need to delete the objects.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 110

Single page →
Topic 1 · Question 110 · Select all that apply

A social media company allows users to upload images to its website. The website runs on Amazon EC2 instances. During upload requests, the website resizes the images to a standard size and stores the resized images in Amazon S3. Users are experiencing slow upload requests to the website. The company needs to reduce coupling within the application and improve website performance. A solutions architect must design the most operationally efficient process for image uploads. Which combination of actions should the solutions architect take to meet these requirements? (Choose two.)

  • AConfigure the application to upload images to S3 Glacier.
  • BConfigure the web server to upload the original images to Amazon S3.
  • CConfigure the application to upload images directly from each user's browser to Amazon S3 through the use of a presigned URL (correct answer)
  • DConfigure S3 Event Notifications to invoke an AWS Lambda function when an image is uploaded. Use the function to resize the image. (correct answer)
  • ECreate an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function on a schedule to resize uploaded images.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Configure the application to upload images directly from each user's browser to Amazon S3 through the use of a presigned URL Option D: Configure S3 Event Notifications to invoke an AWS Lambda function when an image is uploaded. Use the function to resize the image.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 111

Single page →
Topic 1 · Question 111

A company recently migrated a message processing system to AWS. The system receives messages into an ActiveMQ queue running on an Amazon EC2 instance. Messages are processed by a consumer application running on Amazon EC2. The consumer application processes the messages and writes results to a MySQL database running on Amazon EC2. The company wants this application to be highly available with low operational complexity. Which architecture offers the HIGHEST availability?

  • AAdd a second ActiveMQ server to another Availability Zone. Add an additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.
  • BUse Amazon MQ with active/standby brokers configured across two Availability Zones. Add an additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.
  • CUse Amazon MQ with active/standby brokers configured across two Availability Zones. Add an additional consumer EC2 instance in another Availability Zone. Use Amazon RDS for MySQL with Multi-AZ enabled.
  • DUse Amazon MQ with active/standby brokers configured across two Availability Zones. Add an Auto Scaling group for the consumer EC2 instances across two Availability Zones. Use Amazon RDS for MySQL with Multi-AZ enabled. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon MQ with active/standby brokers configured across two Availability Zones. Add an Auto Scaling group for the consumer EC2 instances across two Availability Zones. Use Amazon RDS for MySQL with Multi-AZ enabled.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon RDS is a managed relational database that handles patching, backups and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 112

Single page →
Topic 1 · Question 112

A company hosts a containerized web application on a fleet of on-premises servers that process incoming requests. The number of requests is growing quickly. The on-premises servers cannot handle the increased number of requests. The company wants to move the application to AWS with minimum code changes and minimum development effort. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS Fargate on Amazon Elastic Container Service (Amazon ECS) to run the containerized web application with Service Auto Scaling. Use an Application Load Balancer to distribute the incoming requests. (correct answer)
  • BUse two Amazon EC2 instances to host the containerized web application. Use an Application Load Balancer to distribute the incoming requests.
  • CUse AWS Lambda with a new code that uses one of the supported languages. Create multiple Lambda functions to support the load. Use Amazon API Gateway as an entry point to the Lambda functions.
  • DUse a high performance computing (HPC) solution such as AWS ParallelCluster to establish an HPC cluster that can process the incoming requests at the appropriate scale.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Fargate on Amazon Elastic Container Service (Amazon ECS) to run the containerized web application with Service Auto Scaling. Use an Application Load Balancer to distribute the incoming requests.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM.

SAA-C03 Question 113

Single page →
Topic 1 · Question 113

A company uses 50 TB of data for reporting. The company wants to move this data from on premises to AWS. A custom application in the company’s data center runs a weekly data transformation job. The company plans to pause the application until the data transfer is complete and needs to begin the transfer process as soon as possible. The data center does not have any available network bandwidth for additional workloads. A solutions architect must transfer the data and must configure the transformation job to continue to run in the AWS Cloud. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS DataSync to move the data. Create a custom transformation job by using AWS Glue.
  • BOrder an AWS Snowcone device to move the data. Deploy the transformation application to the device.
  • COrder an AWS Snowball Edge Storage Optimized device. Copy the data to the device. Create a custom transformation job by using AWS Glue. (correct answer)
  • DOrder an AWS Snowball Edge Storage Optimized device that includes Amazon EC2 compute. Copy the data to the device. Create a new EC2 instance on AWS to run the transformation application.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Order an AWS Snowball Edge Storage Optimized device. Copy the data to the device. Create a custom transformation job by using AWS Glue.

Explanation

AWS Snowball physically ships data to AWS, ideal when bandwidth is limited or data is very large. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

SAA-C03 Question 114

Single page →
Topic 1 · Question 114

A company has created an image analysis application in which users can upload photos and add photo frames to their images. The users upload images and metadata to indicate which photo frames they want to add to their images. The application uses a single Amazon EC2 instance and Amazon DynamoDB to store the metadata. The application is becoming more popular, and the number of users is increasing. The company expects the number of concurrent users to vary significantly depending on the time of day and day of week. The company must ensure that the application can scale to meet the needs of the growing user base. Which solution meats these requirements?

  • AUse AWS Lambda to process the photos. Store the photos and metadata in DynamoDB.
  • BUse Amazon Kinesis Data Firehose to process the photos and to store the photos and metadata.
  • CUse AWS Lambda to process the photos. Store the photos in Amazon S3. Retain DynamoDB to store the metadata. (correct answer)
  • DIncrease the number of EC2 instances to three. Use Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volumes to store the photos and metadata.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Lambda to process the photos. Store the photos in Amazon S3. Retain DynamoDB to store the metadata.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SAA-C03 Question 115

Single page →
Topic 1 · Question 115

A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instances are hosted in public subnets. The EC2 instances access Amazon S3 over the internet, but they do not require any other network access. A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet. Which change to the network architecture should a solutions architect recommend to meet this requirement?

  • ACreate a NAT gateway. Configure the route table for the public subnets to send traffic to Amazon S3 through the NAT gateway.
  • BConfigure the security group for the EC2 instances to restrict outbound traffic so that only traffic to the S3 prefix list is permitted.
  • CMove the EC2 instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets. (correct answer)
  • DRemove the internet gateway from the VPC. Set up an AWS Direct Connect connection, and route traffic to Amazon S3 over the Direct Connect connection.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Move the EC2 instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon S3 provides durable, scalable object storage that is fully managed. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

SAA-C03 Question 116

Single page →
Topic 1 · Question 116 · Select all that apply

A company uses a popular content management system (CMS) for its corporate website. However, the required patching and maintenance are burdensome. The company is redesigning its website and wants anew solution. The website will be updated four times a year and does not need to have any dynamic content available. The solution must provide high scalability and enhanced security. Which combination of changes will meet these requirements with the LEAST operational overhead? (Choose two.)

  • AConfigure Amazon CloudFront in front of the website to use HTTPS functionality. (correct answer)
  • BDeploy an AWS WAF web ACL in front of the website to provide HTTPS functionality.
  • CCreate and deploy an AWS Lambda function to manage and serve the website content.
  • DCreate the new website and an Amazon S3 bucket. Deploy the website on the S3 bucket with static website hosting enabled. (correct answer)
  • ECreate the new website. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Configure Amazon CloudFront in front of the website to use HTTPS functionality. Option D: Create the new website and an Amazon S3 bucket. Deploy the website on the S3 bucket with static website hosting enabled.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SAA-C03 Question 117

Single page →
Topic 1 · Question 117

A company stores its application logs in an Amazon CloudWatch Logs log group. A new policy requires the company to store all application logs in Amazon OpenSearch Service (Amazon Elasticsearch Service) in near-real time. Which solution will meet this requirement with the LEAST operational overhead?

  • AConfigure a CloudWatch Logs subscription to stream the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service). (correct answer)
  • BCreate an AWS Lambda function. Use the log group to invoke the function to write the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service).
  • CCreate an Amazon Kinesis Data Firehose delivery stream. Configure the log group as the delivery streams sources. Configure Amazon OpenSearch Service (Amazon Elasticsearch Service) as the delivery stream's destination.
  • DInstall and configure Amazon Kinesis Agent on each application server to deliver the logs to Amazon Kinesis Data Streams. Configure Kinesis Data Streams to deliver the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service).
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure a CloudWatch Logs subscription to stream the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service).

Explanation

Amazon OpenSearch Service provides managed search and log analytics. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 118

Single page →
Topic 1 · Question 118

A company is building a web-based application running on Amazon EC2 instances in multiple Availability Zones. The web application will provide access to a repository of text documents totaling about 900 TB in size. The company anticipates that the web application will experience periods of high demand. A solutions architect must ensure that the storage component for the text documents can scale to meet the demand of the application at all times. The company is concerned about the overall cost of the solution. Which storage solution meets these requirements MOST cost-effectively?

  • AAmazon Elastic Block Store (Amazon EBS)
  • BAmazon Elastic File System (Amazon EFS)
  • CAmazon OpenSearch Service (Amazon Elasticsearch Service)
  • DAmazon S3 (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon S3

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

SAA-C03 Question 119

Single page →
Topic 1 · Question 119

A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region. A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks. Which solution will meet these requirements with the LEAST amount of administrative effort?

  • ASet up AWS WAF in both Regions. Associate Regional web ACLs with an API stage.
  • BSet up AWS Firewall Manager in both Regions. Centrally configure AWS WAF rules. (correct answer)
  • CSet up AWS Shield in bath Regions. Associate Regional web ACLs with an API stage.
  • DSet up AWS Shield in one of the Regions. Associate Regional web ACLs with an API stage.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up AWS Firewall Manager in both Regions. Centrally configure AWS WAF rules.

Explanation

AWS WAF protects web applications from common exploits and malicious requests. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 120

Single page →
Topic 1 · Question 120

A company has implemented a self-managed DNS solution on three Amazon EC2 instances behind a Network Load Balancer (NLB) in the us-west-2 Region. Most of the company's users are located in the United States and Europe. The company wants to improve the performance and availability of the solution. The company launches and configures three EC2 instances in the eu-west-1 Region and adds the EC2 instances as targets for a new NLB. Which solution can the company use to route traffic to all the EC2 instances?

  • ACreate an Amazon Route 53 geolocation routing policy to route requests to one of the two NLBs. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution’s origin.
  • BCreate a standard accelerator in AWS Global Accelerator. Create endpoint groups in us-west-2 and eu-west-1. Add the two NLBs as endpoints for the endpoint groups. (correct answer)
  • CAttach Elastic IP addresses to the six EC2 instances. Create an Amazon Route 53 geolocation routing policy to route requests to one of the six EC2 instances. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution's origin.
  • DReplace the two NLBs with two Application Load Balancers (ALBs). Create an Amazon Route 53 latency routing policy to route requests to one of the two ALBs. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution’s origin.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a standard accelerator in AWS Global Accelerator. Create endpoint groups in us-west-2 and eu-west-1. Add the two NLBs as endpoints for the endpoint groups.

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover.

Showing questions 101–120 of 1019 · Page 6 of 51