Download WGU D319 OA AWS CLOUD ARCHITECTURE QUESTIONS AND ANSWERS and more Exams Computer Science in PDF only on Docsity!
WGU D319 OA AWS CLOUD ARCHITECTURE QUESTIONS AND
ANSWERS
A company plans to migrate a legacy application to Amazon EC2 with no modifications to the application. Once the application has completed a trial in the cloud, the company needs to use machine learning algorithms to adapt the application to changing demands. Which scaling option should be used?
Predictive
A web application uses a web server with a separate database server. The database provides results to the web server. Users report long delays in receiving their results. Logs reveal that the CPU utilization metric for the web server consistently reaches 100%. Performance metrics for the database are nominal. How can the response time be improved?
By scaling the web server layer through the addition of web servers
An administrator is concerned that a consumer may fail and not receive every message immediately. The administrator chooses to use Amazon Simple Queue Service (Amazon SQS) to ensure the consumer will be able to receive all the messages. Which mechanism does Amazon SQS use to allow
the consumer to receive a queued message after the consumer is restored?
Pull
How should an administrator recover queued messages from Amazon Simple Queue Service (Amazon SQS) if the consumer fails?
Pull the queue after the application is restored
An application has the following storage requirements:
Information is stored in multiple tables on a single server.
Master records can be linked to zero or more child records by using shared keys.
The solution must support up to 15 additional replicas.
Which solution should be used?
Amazon Aurora
A Linux application needs to use a shared file system. Which solution should be used?
Amazon EFS
An application is deployed in the us-west-1 and eu-west- Regions, and the users should be sent to the Region with the fastest response for them, regardless of their location. The solution must minimize administrative effort. Which routing policy should be used?
Latency
A notification is sent to an Amazon SQS queue when an object is uploaded to an Amazon S3 bucket. An Amazon ECS cluster processes messages from the queue. The required queue size fluctuates based on the number of incoming messages and the processing speed. The company needs to design a scaling strategy for auto scaling that will minimize the queue size. Which metric should be used for auto scaling to minimize the queue size?
Amazon SQS messages
A company hosts a website from two EC2 instances. Users access the website through an Elastic Load Balancer (ELB). The company needs to ensure the website is highly available if one or more of the EC2 instances are unavailable. Which solution should this company use?
Configure the ELB to implement Auto Scaling based on health checks
A company plans to migrate a legacy application to EC2 with no modifications to the application. The company hopes to add modern cloud features to immediately respond to changing needs. Which cloud feature will achieve this goal?
Auto scaling
A company plans to migrate a legacy application to EC2 with no modifications to the application. The application has regular seasonal increases in demand, and it must automatically adapt to these needs. Which scaling option should be included in the migration?
Scheduled
A company plans to migrate a legacy application to Amazon EC2 with no modifications to the application. The application constantly changes demands with no patterns, and it must automatically adapt to these needs. Which scaling option should be included in the migration?
Dynamic
A client plans to use the internet to copy a large amount of data from an on-premises Network File System (NFS) store to Amazon S3. Which service will transfer the data in the shortest time?
Amazon Web Services DataSync
handle the workload. Which capacity setting should the company choose for the Auto Scaling group?
Desired
Which solution is used with Amazon ECS to run containers without managing servers or clusters of EC2 instances?
Fargate
An application allows users from around the world to upload content to an Amazon S3 bucket. Which Amazon S3 feature minimizes upload times and costs?
Transfer Acceleration
Which type of volume should be used for an EC2 root with minimum latency?
Instance store
Which solution should be used to store application content that is accessed concurrently by a fleet of Amazon EC2-based Linux hosts?
Amazon EFS
A company is planning to move its on-premises Windows domain servers to the cloud. As part of this move, the company needs a storage solution that can host shared file systems for its Windows hosts. The file sharing will be done using Server Message Block (SMB) and needs to support file system access control lists (ACLs), shadow copies, and user quotas. Which storage solution supports these requirements?
Amazon FSx
A client has an on-premises data center and wants to establish a network link to an Amazon Virtual Private Cloud (VPC). The solution must ensure the maximum throughput and minimum latency. Which service provides these capabilities?
AWS Direct Connect
A client has an on-premises data center and needs to transfer large data sets to AWS over the network without affecting the internet bandwidth available for its on-premises workloads. Which service provides these capabilities?
AWS Direct Connect
A company needs to connect its VPC to the EC2 API. Which solution meets this requirement at the lowest cost and with the least configuration?
An administrator needs a relational database that can support online analytical processing (OLAP) and provide fast performance despite many concurrent queries. Which solution should this administrator choose?
Amazon Redshift
An application running in an EC2 instance needs to access an Amazon S3 bucket with temporary credentials generated by AWS Security Token Service (AWS STS). Credentials cannot be stored in the EC2 instance. Which principal type should the client use to configure the application access to the Amazon S3 bucket?
IAM role
An organization has signed up for an AWS account. Which action should be performed to ensure the account is secured and used according to the principle of least privilege?
Delete the root access keys and secret
A company needs to configure an EC2 instance for delegate access to a DynamoDB table. Which policy should this company use?
Permissions
What is used in the IAM policy evaluation logic?
An explicit allow in a resource-based policy overrides an implicit deny.
A client has an Amazon Virtual Private Cloud (VPC) containing 10 Amazon EC2 instances. The client plans to develop an application that will call Amazon EC2 API from the EC instances. Which service should this client use to implement a private connectivity for the Amazon EC2 API calls from the VPC?
Interface endpoint
A company is building a new application, and as part of this new application, the company will provision a multi-tiered EC infrastructure across multiple Availability Zones and subnets. They will have an application server tier, a web server tier, and a database tier. For their network security, the company is looking for a solution that will enable them to create the rules once per tier type and apply the rules to all created instances. They also want the solution to filter traffic between the instances in the same tier. Which solution fits these requirements?
Security group
An ALLOW outbound rule with source 0.0.0.0/0 and a DENY outbound rule with destination 143.38.54/
Which IAM policy is applied directly to a user to control their permissions?
Identity-based
An organization wants to host the master keys used by Oracle Transparent Data Encryption (TDE) in AWS. Which type of customer-managed keys in Key Management Service (KMS) should be used?
Symmetric keys with custom key store
An organization is evaluating the options to protect data in the cloud and has the following requirements:
Cryptographic secrets need to be hosted in a single-tenant service.
The organization needs to manage the root of trust.
What should this organization use store to the secrets?
AWS CloudHSM cluster
Which solution provides a customer-managed root of trust?
AWS CloudHSM
A company plans to host a public website in AWS. Users will access the website using SSL/TLS. The company requires the ability to delete keys if they are compromised. Which key solution should this company use?
Customer-managed asymmetric key
A company is building a high-performance computing (HPC) clustered workload on AWS using EC2 instances and is looking for a fully managed, shared storage solution for this workload. Once the HPC portion of the data processing is complete, the company would like to serve the resulting data directly on the internet. Which Amazon service would be the most cost- effective solution for these requirements?
FSx for Lustre
Which Amazon storage class monitors data usage and moves data to the most cost-effective location?
S3 Intelligent-Tiering
A client wants to use a managed service to replace an EC instance that currently hosts a Windows Server file server, with shares accessible via the SMB protocol. The managed service must provide support for Active Directory and Distributed File System. Which Amazon service should this client choose?
FSx
When users consume data from an Amazon S3 bucket, a company wants to reduce transfer costs by enforcing that the content is delivered using CloudFront. Which feature should be configured?
Origin access identity
A company needs to store backup data in Amazon S3. There are no restrictions on where the data can be stored geographically. The company wants to find the lowest cost for storage and transfers. Which boundary should this company consider comparing storage fees at?
Region
A client wants to implement redundant network access to EC instances with automatic failover in case the existing AWS
Direct Connect connection fails. The solution must minimize cost. Which network access option should this client use?
Site-to-Site VPN
A client has 100 on-premises locations in the northwestern United States. Each location has network access to the same Amazon VPCs in the US West AWS Region via Internet Protocol Security (IPSec) tunnels. The client plans to create 500 Amazon VPCs in the same Region. The client needs to ensure all Amazon VPCs will be accessible from each of its on-premises locations. The solution must minimize cost of on- premises infrastructure. Which additional network access method should this client include in the solution?
AWS Transit Gateway
You can also click on terms or definitions to blur or reveal them
Review with an activity
About us
About Quizlet
Careers
Advertise with us
Get the app
For Students
Flashcards
Language
English (UK)
© 2026 Quizlet, Inc.
COPPA Safe Harbor Certification seal
Home
Your library
Notifications
4
Your folders
New folder
Start here
Flashcards
Expert solutions
Home
Your library
Notifications
4
New folder
Flashcards
Expert solutions
