SAP-C03 practice questions
AWS · SAP-C03 · 300 questions
Original practice questions for the AWS Certified Solutions Architect – Professional (SAP-C03) exam, covering every domain of the official exam outline.
This course contains the use of artificial intelligence.
About the SAP-C03 exam
- Questions
- 75 (65 scored + 10 unscored)
- Passing score
- 720 (scale 100-1,000)
- Format
- Multiple choice and multiple response; pass/fail with compensatory scoring
Exam details published by the vendor, checked 2 November 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Architecture Design and Implementation Built for the Cloud (25%) · 75 questions
- A financial advisory firm wants a Bedrock assistant that answers from 50,000 internal PDFs with citations, daily document updates, and low-latency semantic search without fine-tuning a model. Retrieved context must stay fresh and traceable to source chunks. Which RAG ingestion and retrieval design meets the grounded generation requirement?
- A retail platform processes orders in eu-west-1 and runs analytics in us-east-1 under a separate analytics account. Order events must route reliably across accounts and Regions, support schema filtering, and allow replay for new consumers without custom polling. Which EventBridge pattern provides cross-account and cross-Region event routing?
- A national e-commerce retailer processes 20,000 orders per hour during flash sales. Payment events must be processed exactly once and in order per customer to avoid double charges, while inventory updates can tolerate duplicates and out-of-order delivery for higher throughput. What messaging design satisfies both needs?
- A SaaS company hosts its app in three workload accounts and must add support chat using Amazon Bedrock without storing foundation model data locally and while centralizing model access control and logging. Developers need private inference in each workload VPC. Which multi-account generative AI integration pattern meets centralized governance with local inference?
- A gaming studio needs sub-10ms reads for player profiles with millions of requests per second, flexible JSON attributes per game, global distribution, and strong consistency only for inventory trades while profiles use eventual consistency. Which database service best fits these access and scalability requirements?
- A global media company with VPC-only IPv4 workloads must support IPv6 mobile clients, retain private IPv4 for legacy databases, and avoid address exhaustion during expansion. The dual-stack rollout must not break existing DNS. Which IPv6 adoption strategy enables dual-stack growth with compatibility?
- A regulated fintech company runs 15 containerized microservices handling ledger writes and notifications. The team has no Kubernetes expertise, must avoid EC2 node patching, requires AWS-native service discovery between services, and needs isolated IAM permissions per microservice task. Which container orchestration approach meets these microservice isolation and operations requirements?
- A gaming company runs active-active APIs in us-east-1 and eu-west-1 needing sub-100ms joins, automatic failover on health failure, and static IPs for firewall allowlisting. Latency-based DNS alone causes inconsistent reconnects. Which global traffic routing design meets latency, failover, and static IP needs?
- A manufacturer runs factory systems on premises and VPC workloads in us-east-1 that must stay connected during carrier outages, with sub-second failover between paths and centralized routing to three VPCs. Compliance requires encrypted redundant corporate connectivity. Which hybrid connectivity design delivers redundant failover with centralized routing?
- A fintech trading platform in us-east-1 needs multi-second RPO, under 30-second RTO, and sub-100ms local reads in eu-west-1 for an Aurora MySQL cluster without application rewrites or manual binlog replication. Failover must promote the remote region quickly. Which scaling solution provides highly available global reads and fast regional failover?
- A travel booking startup runs ticketing APIs on EC2 instances behind an ALB and loses shopping carts whenever an instance is replaced during scaling events. Traffic triples on holidays and the team must scale horizontally without session loss while keeping read latency under 20 ms for seat maps. How should state be redesigned?
- A travel company wants a conversational agent that can check live bookings via Lambda, answer policy questions from PDFs, maintain session memory, and trace each tool call for support audits. Developers prefer managed orchestration over custom LangChain code. Which AI agent architecture integrates tools with traceable managed orchestration?
- An e-commerce company stores 80 TB of clickstream JSON in S3, needs SQL analytics with schema evolution, fine-grained access by marketing team, and Redshift joins without duplicating data. Query patterns are ad hoc and bursty. Which data lake design supports governed schema-evolving analytics with zero-copy warehouse joins?
- A logistics firm runs 50 microservices across three VPCs and two accounts with polyglot protocols. Teams need identity-aware routing, fine-grained traffic shifting, and unified telemetry without running sidecar proxies or managing service discovery manually. Which service mesh design simplifies communication and observability?
- A Tier-1 auto parts plant keeps 40 TB of quality videos on on-premises NFS with POSIX permissions. Engineers need nightly replication to Amazon S3 for analytics, bandwidth throttling during shifts, and incremental transfers with integrity validation. Which data synchronization strategy best meets the hybrid file replication requirements?
- A B2B SaaS company hosts churn models for 180 small tenants. Each model is invoked sporadically during business hours, sits idle overnight, requires low-latency responses when called, and must avoid paying for 180 always-on endpoints. Which SageMaker inference design delivers cost-efficient low-latency scoring across tenants?
- A visual-effects studio runs 800 Linux render nodes in one AZ that need a shared POSIX namespace for 4K frames, with bursty 50 GB/s throughput for scratch files that are deleted after 10 days, plus durable render output kept for months. Which storage architecture best matches these access patterns and performance requirements?
- A fitness app streams 40,000 wearable events per minute with bursts during races. Product wants SQL queries over raw and curated data, automatic schema discovery, and no cluster tuning during spikes. Which serverless pipeline best delivers this analysis?
- A national logistics firm runs inventory on premises with JMS queues and SOAP XML services that cannot be rewritten. Partners need REST JSON APIs with burst buffering and per-key throttling during peak season. Which data-transformation integration pattern modernizes the legacy interface without rewriting the host?
- A retail chain ingests clickstreams and POS events at 40K per second for fraud alerts within seconds, plus nightly inventory joins over terabytes and Salesforce contact sync for dashboards. Exactly-once stream handling and SQL warehousing are needed. Which analytics pipeline meets real-time and batch needs?
- A gaming leaderboard uses DynamoDB with 85% repeated reads of player ranks, p99 latency spiked to 18 ms during tournaments, and developers cannot add cache invalidation code due to a freeze. Which data caching strategy optimizes DynamoDB performance without application rewrites?
- An insurance firm processes claims in five steps across Lambda, human approvals, and partner APIs with retries, timeouts, and full audit of state. Executions must survive staff delays lasting days and resume safely after failures. Which design provides durable execution?
- A legal tech firm must let its assistant answer from 200,000 private contracts that update daily, cite source clauses, avoid retraining a model, and keep data within its VPC boundary. Answers must stay current as PDFs arrive in S3. Which RAG ingestion and retrieval strategy best meets these grounding and freshness requirements?
- A delivery platform stores 400 microservice images in Amazon ECR across teams, facing stale vulnerable images and rising storage spend. Leadership wants automatic vulnerability detection, cleanup of old tags, and blocked mutable overwrites. Which ECR configuration governs image security and lifecycle?
- A global manufacturer keeps corp.example.com on on-premises BIND servers and runs factory analytics in a VPC using the same name in a private hosted zone. On-premises BIND is authoritative for the plant.corp.example.com subdomain, while the private hosted zone holds the AWS record names under corp.example.com. EC2 must resolve on-premises names and plant resolvers must resolve AWS private names without leaking private IPs publicly. Which DNS solution delivers bidirectional hybrid resolution for the overlapping zone?
- A gaming studio runs real-time matchmaking on EKS with sharp evening spikes where pods queue while nodes sit full, then idle capacity wastes spend overnight. CPU-based pod limits alone cannot add nodes. Which auto scaling pattern handles bursty container demand cost-effectively?
- A media company produces live-stream metadata in an ap-southeast-2 production account and must deliver filtered playback events to a central analytics custom bus in a eu-west-1 audit account with secure least-privilege access and replay for missed events. Compliance requires no public internet exposure of the bus. Which cross-account and cross-Region event routing pattern using event buses and forwarding meets these needs?
- A gaming platform needs millisecond leaderboards for 2M daily players, relational inventory with ACID transactions and joins, plus petabyte-scale analytics over historical seasons. Single database cannot meet latency, consistency, and scale together. Which database selection fits access patterns and scalability?
- Three subsidiaries need governed access to a central marketing data lake in S3 for campaign joins without copying raw tables, with column-level privacy and expiring access. Which data cataloging and cross-account sharing pattern enables secure governed discovery?
- A brokerage connects its headquarters to six production VPCs in one Region. Trading feeds require consistent private throughput, must fail over automatically if a dedicated path fails, and must avoid manual router changes during outages. Which hybrid connectivity design provides redundant automatic failover for the VPC estate?
- A global travel booking platform runs on Amazon Aurora PostgreSQL in eu-west-1 with heavy read traffic in us-east-1 and ap-southeast-2. The business requires regional reads under 50 ms, RPO of about a second, and managed cross-Region failover within a few minutes. Which database scaling solution provides high availability with fast global failover?
- A manufacturing company runs computer-vision quality inspection on its factory floor requiring single-digit millisecond latency to on-premises machines, must keep sensor data resident on-site for compliance, and wants the same Kubernetes APIs and ECR images as its AWS cloud workloads. Which hybrid compute pattern provides AWS-managed infrastructure on-premises for this workload?
- A 12-person retail team runs 25 microservices with spiky checkout traffic, has no Kubernetes expertise, and must deploy quickly across AZs without managing EC2 nodes. Uptime and simplified operations matter more than pod-level control. Which container orchestration approach for microservices should the architect choose?
- A food delivery platform emits order events from checkout that must be processed in order per restaurant, duplicates suppressed from retries, and failures retried without loss. Throughput is 300 TPS with Lambda consumers. Which messaging design provides ordering, idempotency, and delivery guarantees for this workload?
- A media studio keeps 40 TB of NFS video on premises, needs nightly one-way sync to S3 for rendering, must preserve permissions and throttle bandwidth during business hours. Which data synchronization design meets hybrid transfer requirements?
- An e-commerce platform sees HTTPS bursts for checkout via browsers and persistent MQTT connections from 200k IoT price tags needing low-latency passthrough. Cost must scale per pattern. Which ingress pattern using load balancers and API Gateway optimizes resources for each usage pattern?
- An enterprise runs 40 microservices across three VPCs and two accounts using ECS and Lambda, needing identity-aware HTTP routing, fine-grained access, and unified observability without sidecar proxies to manage. East-west traffic must scale without Transit Gateway peering sprawl. Which service mesh design for microservice communication and observability should the architect adopt?
- A global news site serves 5M readers with personalized headlines requiring sub-50ms header rewrites at edge and heavier A/B personalization needing regional compute. Cache hit ratio must stay high. Which edge architecture using CloudFront Functions and Lambda@Edge meets latency and compute needs?
- A SaaS provider has 60 workload VPCs across three business units plus on-premises data centers, must share a central logging and license service without transitive internet routing, and needs private connectivity that scales without managing hundreds of peering links. Which multi-VPC hybrid connectivity design provides scalable private service sharing?
- A video editing collective has 40 EC2 editors across two Availability Zones needing shared POSIX access to 20 TB of active projects with sub-millisecond latency and burst throughput for 4K renders. Cold footage must cost little. Which storage architecture matches access patterns and performance requirements?
- A logistics firm runs IBM MQ on premises and SOAP mainframe jobs, needs REST APIs for mobile apps with payload reshaping and durable buffering during outages. Which integration pattern modernizes legacy systems with data transformation?
- A travel booking service runs stateful sticky sessions on EC2 with local carts, causing lost bookings on scaling and AZ failure. It needs seamless failover, sub-10ms session reads, and durable itineraries. Which stateless design with externalized state meets resilience and performance goals?
- A media company stores 800 container image versions in ECR across dev and prod, facing rising storage costs, stale vulnerable tags, and no visibility into base-image CVEs. Teams overwrite mutable tags and never clean up. Which container image management using security scans and lifecycle policies should the architect enforce?
- A gaming leaderboard uses DynamoDB with 80% repeated reads of the same player profiles and suffers throttling during tournaments despite overprovisioned capacity. P99 latency must stay under 5 ms without changing application queries. Which data caching strategy optimizes DynamoDB read performance?
- A fintech startup will operate 150 VPCs across dev, test, and prod with overlapping team CIDRs, must prevent IP exhaustion, enforce segmentation between tiers, and provide auditors with a single view of allocations. Which VPC addressing and segmentation design ensures scalable isolation?
- A manufacturer runs corp.example.com on on-premises Active Directory DNS and runs the same domain in a VPC via a Route 53 private hosted zone for EC2 workloads. Both sides must resolve each other's new records without changing the domain name. Which DNS integration design achieves bidirectional hybrid resolution for this split-horizon namespace?
- A media company ingests 8,000 click events per second from web clients, must transform JSON to Parquet in near real time with no servers to manage, auto-discover schema for analysts, and support ad-hoc SQL without clusters. Which serverless data processing pipeline meets these streaming and analysis requirements?
- A retail group has sales data in three member accounts registered to S3, needs governed cross-account discovery of curated tables only, plus privacy-preserving joins with a supplier without sharing raw data. Which data cataloging and sharing pattern meets all needs?
- A sports media startup serves 200,000 fans with live scores, chat, and polls needing sub-second fan-out and bidirectional messages. REST polling overloaded servers and missed updates during goals. The team runs on API Gateway, Lambda, and DynamoDB. Which WebSocket and publish-subscribe design supports real-time data processing?
- An e-commerce platform runs burst checkout APIs on Lambda and catalog services on EKS with spiky traffic. The team must scale functions without throttling, scale pods on custom latency metrics, and add nodes only when pods cannot schedule. Which auto scaling combination fits serverless and container patterns?
- A retailer runs public web apps behind an Application Load Balancer and private VPC workloads needing east-west inspection between subnets, SQL injection blocking, and subnet-level filtering with audit trails. Which network security architecture delivers traffic inspection, filtering, and application-layer protection?
- A robotics manufacturer needs to run containerized quality-inspection workloads inside its factory with single-digit millisecond access to on-site machines, using AWS APIs and EKS while AWS operates the rack hardware. Which hybrid compute pattern satisfies this low-latency on-premises requirement with managed infrastructure?
- A fintech startup needs public HTTPS APIs with path-based routing to microservices, sudden 10x burst traffic, plus a separate low-latency TCP feed for market data with static IPs for allowlisting. Which ingress pattern optimizes resources for both usage patterns?
- A health SaaS has 400 standard clinics sharing tables and 10 hospital tenants requiring strict data isolation and per-tenant keys for compliance. A single pooled database without controls caused cross-tenant reads in testing. Which multi-tenant architecture with tenant isolation patterns meets both needs?
- A fintech order flow spans payment authorization, fraud check, and ledger posting across three Lambdas, must survive crashes mid-flow, retry steps with backoff, and maintain exactly-once state without custom checkpoint code. Which durable execution pattern handles this multi-step workflow?
- A ticketing platform must process seat holds in strict order per event, handle duplicate webhook deliveries safely, and fan out confirmations to email, SMS, and analytics with at-least-once delivery. Which event-driven messaging pattern meets ordering and delivery guarantees?
- A global streaming platform is exhausting IPv4 addresses, faces higher NAT costs, and must support IPv6 clients while keeping IPv4 compatibility for legacy encoders. Which IPv6 adoption and dual-stack migration strategy enables end-to-end coexistence?
- A retailer operates 20 member accounts across two Regions, must aggregate order events centrally for analytics, preserve source account context, enforce least-privilege event access, and forward events reliably across Regions. Which cross-account event routing pattern meets these needs?
- A bank centralizes Bedrock guardrails and logging in a shared-services account while product teams build assistants in 20 workload accounts. Security forbids internet-exposed model traffic and duplicated guardrail rules. Which multi-account generative AI integration for Bedrock meets both goals?
- A logistics group runs 40 workload accounts with a shared payments VPC and an on-premises data center over Direct Connect. Workloads need centralized routing, overlapping IP isolation for acquisitions, and private access to payments without traversing the internet. Which connectivity design provides scalable hybrid and multi-account VPC integration?
- A global media site serves personalized images from S3 via CloudFront to 40 countries. It must rewrite viewer URLs, add country headers, and validate lightweight tokens at the edge for millions of requests with submillisecond startup and minimal cost. Which edge compute control meets the latency requirement for this token check?
- A mobile gaming startup runs leaderboard and session logic on EC2 instances with local memory and disk. Players lose progress when instances restart and scaling out causes inconsistent scores across Availability Zones. The team wants stateless containers that scale horizontally. Which externalized state management design best enables stateless application scale?
- A fintech runs active-active trading APIs in eu-west-1 and us-east-1 over TCP with TLS. Clients need fixed anycast IPs, sub-minute failover for TCP health failures, and no DNS caching delays. Compliance requires traffic to stay on the AWS backbone. Which global traffic routing strategy meets multi-Region TCP routing requirements?
- A SaaS company is decomposing a monolith into 30 Kubernetes-native microservices with spiky traffic, wants Kubernetes APIs and serverless nodes, and requires namespace isolation plus autoscaling without managing EC2. Which container orchestration design for microservices best balances control and operations?
- A retailer stores 80 TB of clickstream and orders in S3 with duplicated Parquet datasets. Analysts need ACID upserts, schema evolution, fine-grained access, and SQL from Athena and Redshift. Engineering wants open formats without a proprietary store. Which data lakehouse design supports governed Iceberg queries with Lake Formation?
- A logistics company ingests 15,000 vehicle telemetry events per second that must be filtered, enriched, cataloged for SQL, and available to analysts within minutes. Engineers want no servers to manage and pay only for queries run. Which serverless data processing and analysis pipeline meets near-real-time and ad hoc needs?
- A healthcare SaaS must deploy HIPAA workloads across three Availability Zones with web, app, and database tiers, non-overlapping CIDRs for future peering, and audit-ready IP tracking. Growth will require many VPCs and subnets. Which VPC architecture using segmentation and address management ensures scalable isolation?
- A travel company wants a conversational agent that answers policy questions from its help center, checks live booking APIs, and books changes when the user confirms. Responses must cite sources and invoke verified backend actions. Which AI agent architecture integrates tools using Bedrock AgentCore and Knowledge Bases?
- A live auction platform must push bid updates to 50,000 browsers in under a second and broadcast each new bid to all watchers while tracking active connections. Polling overloads the backend. Which architecture supports real-time bidirectional messaging for this fan-out requirement?
- A fraud startup scores payments in under 100 ms with spiky daytime traffic and idle nights, using a custom XGBoost container. It needs automatic scaling, A/B testing of model variants, and minimal ops overhead. Which ML inference architecture using SageMaker AI endpoints meets these needs?
- A fintech runs public APIs on an ALB with microservices in private subnets and Direct Connect to on-premises. It must inspect all east-west and egress traffic, filter stateless floods, and block OWASP web attacks centrally. Which network security architecture provides layered traffic inspection and filtering?
- A retailer runs 40 ECS microservices across three VPCs needing fine-grained L7 routing, identity-aware access, and unified tracing without managing sidecar proxies. Which service mesh design for microservice communication best reduces operational overhead?
- A food delivery company needs live driver ETAs from 20K Kafka events per second and nightly SaaS order dumps for BI. Analysts query curated data in Redshift with sub-second dashboards. Ingestion must be managed without custom servers. Which analytics pipeline supports real-time MSK streaming with batch SaaS ingestion?
- An e-commerce checkout orchestrates inventory reserve, payment, fraud review with 24-hour human approval, and shipment across Lambda, SQS, and third-party APIs. Timeouts and partial failures cause double charges and lost orders. Engineers need retries, parallel steps, and durable state across days. Which durable execution pattern coordinates the multi-step checkout reliably?
- A fintech SaaS has 200 startups on shared services but five banks demand isolated compute, data, and keys with tenant-aware auth. It must balance cost efficiency with strong isolation. Which multi-tenant control satisfies both isolation tiers for this platform?
Security, Compliance, and Governance (25%) · 75 questions
- A SaaS startup runs a React web app and mobile clients that sign in with Google and corporate SAML IdP. The API on API Gateway and Lambda needs per-user JWT claims for authorization, plus temporary AWS credentials for direct S3 uploads. Which authentication design provides both user-directory federation and scoped AWS access?
- A regional hospital group with 1,200 clinicians uses Microsoft Entra ID as its HR-backed identity source. Doctors need short-term AWS console and CLI access scoped to their department, with joiner and leaver updates applied automatically and no long-lived IAM users to manage. What identity design meets this requirement?
- A financial holding company runs 60 AWS accounts in AWS Organizations with separate OUs for prod and sandbox. Auditors require that no member account can leave the organization and S3 buckets cannot grant access to principals outside the organization, even if developers allow it. Which SCP and RCP combination enforces both identity and resource-based guardrails?
- A fintech runs 300 AWS accounts under Organizations with EC2 and ECR workloads subject to PCI DSS. It needs continuous vulnerability scanning, automated patching on a schedule, and centralized compliance reporting without installing third-party agents. Which solution meets these multi-account governance requirements?
- A financial services firm runs 60 AWS accounts under AWS Organizations with new accounts added monthly. Auditors require continuous checks for public S3 buckets, unencrypted volumes, and open security groups, with central findings and automatic evaluation in every Region. Which governance design provides automated multi-account compliance monitoring?
- A platform team lets three vendor accounts deploy to a central production account, but auditors found long-lived access keys and overly broad PowerUser access with no scoping by project. Vendors must get short-lived project-scoped access with a controllable maximum. Which least-privilege cross-account design enforces temporary project-scoped vendor access?
- A healthcare company with 40 accounts under AWS Control Tower must automatically detect unencrypted S3 buckets, public security groups, and drift, then show a unified compliance score to auditors with auto-remediation for critical findings. Which automated compliance monitoring design provides continuous detection and centralized posture visibility?
- A healthcare startup stores PHI in S3 and RDS, must enforce least privilege, encrypt data at rest and in transit, and prove who accessed which patient record and when for HIPAA audits. Developers use federated SSO and auditors need immutable evidence. Which architecture meets these data protection requirements?
- A fitness SaaS with 200,000 mobile users needs social sign-in, MFA, and fine-grained access where premium subscribers can stream videos from S3 while free users cannot. The mobile app calls API Gateway and Lambda, and IoT scales must upload directly to S3 with temporary credentials. What auth design fits?
- A healthcare company stores PHI in S3 and shares APIs via VPC endpoints, but leaders fear data exfiltration to external accounts and overly permissive endpoint access. They need to validate that no bucket or endpoint allows unintended external principals. Which data perimeter validation design detects unintended external access?
- A SaaS company manages 800 EC2 instances and container images across production and staging accounts. Security requires continuous vulnerability detection for OS and images plus scheduled OS patching with approval windows and centralized compliance reporting. Which design provides automated scanning and patch management?
- A logistics firm hosts shipment data in a central account and hires an analytics vendor using its own AWS account for quarterly reporting. The vendor must access only the s3://shipments/partner/ prefix for 4 hours at a time, vendor sessions must be confined even if the role policy grows, and confused-deputy access must be blocked. Which temporary-credential design enforces least-privilege cross-account access for this vendor?
- A logistics enterprise runs 800 EC2 instances and 200 ECR images across prod and dev, facing audit pressure to continuously scan OS and container vulnerabilities and auto-patch missing updates within maintenance windows without manual SSH. Which automated scanning and patching design closes findings end-to-end?
- A healthcare startup stores patient records in S3 and RDS containing PHI across two Regions. HIPAA requires encryption at rest and in transit, least-privilege access with separation of duties, and immutable audit trails of every data access and key use. Which architecture meets these data protection requirements?
- A European bank must keep customer PII within eu-central-1, prevent cross-border replication, allow EU-only administrators to manage keys and logs, and demonstrate residency to regulators during audits. Applications run on S3, RDS, and KMS. Which solution enforces data sovereignty controls?
- A bank runs payment workers on premises and in another cloud that must call S3 and SQS without storing long-lived AWS keys, with short-lived credentials and centralized trust rotation. Security forbids exporting service account passwords to AWS. Which workload identity design grants hybrid workers secure temporary AWS access?
- A regional bank hires three audit firms that all need short-lived read-only access to transaction logs in the bank's AWS account. Compliance requires prevention of confused-deputy access, a hard cap on maximum permissions, and no long-term keys. What access design meets these needs with least privilege?
- A healthcare SaaS stores PHI in S3 and shares analytics via cross-account roles, but auditors found a VPC endpoint allowed S3 access from outside the organization and external principals accessed a bucket. Strict data perimeter and least privilege are required. Which data perimeter design validates external access and restricts egress?
- A bank launches a Bedrock assistant that summarizes loan files, and regulators require an immutable audit trail linking every prompt, model version, and approver action for seven years with fast SQL investigations. Which audit trail management design for regulated AI workloads satisfies retention and investigation needs?
- A fintech startup stores loan applications in S3 and Aurora PostgreSQL. Regulators require customer-managed encryption at rest, department-based least-privilege access to files and rows, and an auditable trail of who accessed sensitive objects. Which data protection design satisfies encryption, access control, and audit logging requirements?
- A healthcare SaaS stores PHI in S3 and EBS for 200 clinics and must enforce customer managed keys per tenant, with annual rotation without re-encrypting data and centralized audit of key use. Which encryption-at-rest design with automatic rotation satisfies the tenant isolation requirement?
- A manufacturer runs signing servers in on-premises data centers and in another cloud, needing short-lived AWS credentials to upload telemetry to S3 without storing long-lived keys or opening inbound firewall ports. Rotation and audit are required. Which workload identity design grants hybrid servers secure AWS access?
- A German health startup must process patient data only inside Germany to satisfy regulators, blocking accidental replication or admin access from other Regions. Architects use eu-central-1 but fear a future setting enables cross-Region copies. Which architecture enforces German data sovereignty for regulated storage and keys?
- A biotech enterprise stores genomic data in S3 and must prove no external network path or permissive policy allows exfiltration, while partners access dashboards through identity-aware private entry. Which combination enforces this data perimeter?
- A bank uses Amazon Bedrock and Lambda for loan summaries and must prove to auditors who accessed which customer record, prompt, and model response with tamper-proof retention. Current app logs omit identity and model IDs. Which audit-trail design satisfies regulated AI workload traceability?
- A telehealth startup must secure browser-to-ALB and microservice-to-microservice traffic, enforce modern TLS, automate public certificate renewal, and issue private certs for internal mTLS. Which certificate management design using TLS 1.3 and AWS issuance best meets the in-transit encryption need?
- A European bank must keep customer ledgers inside the EU, prevent any cross-border replication, prove residency to regulators, and still allow EU-based analytics. Architects propose eu-central-1 with backups and support access from abroad. Which solution best meets these data sovereignty control requirements?
- A Bahrain-based payments fintech must store transaction records and backups solely in me-south-1 to satisfy national regulation, prevent any cross-Region copies or replication, and provide regulators with continuous evidence of residency. Workloads run on Amazon EC2, RDS and S3 under AWS Organizations. Which architecture enforces Region-specific deployment and transfer restrictions for data residency compliance?
- A bank must encrypt S3, EBS, and RDS with distinct department keys, enforce least-privilege use, audit every decryption, and rotate keys automatically without re-encrypting all data manually. Which encryption design meets centralized key control?
- A manufacturer runs Kubernetes on-premises and in another cloud that must call S3 and SQS without storing AWS keys, with short-lived credentials tied to existing enterprise identities. Which workload identity design is correct?
- A pharmaceutical firm runs a regulated research assistant on Amazon Bedrock in two accounts, must retain every API action and every model prompt for 7 years immutably, and must prove no log tampering to auditors. Which audit trail design satisfies regulated AI logging requirements?
- A regulated bank runs 40 accounts under AWS Organizations with centralized CloudTrail and Config. Auditors demand quarterly SOC 2 and PCI evidence, tamper-evident resource history, and self-service access to AWS compliance reports. Which evidence-collection design satisfies centralized audit reporting and compliance documentation needs?
- A healthcare SaaS must keep German patient records in eu-central-1 only, while serving global users from nearby Regions without replicating PHI. Legal requires blocking cross-border transfers of stored data. Which data residency control using Region-specific deployments and transfer restrictions satisfies German storage isolation?
- A bank must support FIPS 140-3 Level 3 protection for payment-card key operations, requires single-tenant hardware with exclusive customer control of keys, needs to offload OpenSSL operations from EC2, and must retain audit logs for regulators. Which key management solution satisfies this dedicated hardware requirement?
- A healthcare company stores PHI in S3 and RDS and faces an audit requiring customer-controlled encryption at rest with annual key rotation and centralized key audit trails. AWS managed keys are no longer sufficient. Which encryption at rest design using customer managed keys and rotation should the architect implement?
- A healthcare startup runs internal microservices behind an Application Load Balancer and must encrypt all service-to-service traffic with TLS 1.3 using short-lived certificates and automated renewal. Private trust is required without public domain validation. Which certificate-based encryption in transit design meets these requirements?
- A public fintech that already uses AWS Audit Manager and AWS Config must prove PCI DSS and SOC compliance quarterly to enterprise buyers, showing current AWS certifications and its own control activity. Security wants centralized evidence without manual screenshots. Which compliance evidence collection and reporting solution using AWS Artifact and audit services meets buyer due diligence?
- A health startup is launching a patient portal on AWS with PHI in RDS, public APIs via API Gateway, and CI/CD with broad IAM roles. Leadership wants structured threat identification and prioritized mitigations before launch. Which risk assessment solution best delivers threat modeling and mitigation planning?
- A public-sector SaaS provider must retain Canadian citizen case files only in ca-central-1, block cross-Region copies of S3 objects and backups, and demonstrate containment during audits. Operations teams work in multiple Regions for other workloads. Which data residency design enforces and proves regional containment for citizen data?
- A bank operates internal APIs on private subnets across three regions, requiring TLS 1.3 for all east-west traffic, automated private certificate issuance and renewal, and centralized private trust without public domains. Manual CSR handling caused outages. Which encryption in transit design using certificate management should the architect deploy?
- A payment processor must meet PCI DSS and banking regulations requiring single-tenant cryptographic hardware, exclusive key control, and FIPS 140-2 Level 3 validation. Shared multi-tenant key services are prohibited by auditors. Which dedicated hardware security module design satisfies regulatory compliance?
- A healthcare SaaS must prepare document-signing keys for quantum-safe requirements, needs FIPS-approved digital signatures with centralized key lifecycle, requires AWS-managed HSM backing, and must use standardized Module-Lattice algorithms without building custom crypto. Which post-quantum key management design meets these signing needs?
- A tutoring company launches a Bedrock chatbot for K-12 students needing blocked self-harm content, redacted PII, and grounded answers with citation enforcement. Parents require logged policy actions. Which generative AI control design enforces content filtering and compliance logging?
- A fintech startup that already uses AWS Audit Manager in its Organizations management account must furnish SOC 2 evidence quarterly, needs tamper-evident collection across 12 accounts plus on-demand auditor access to AWS compliance reports. Which compliance evidence collection design streamlines reporting with Artifact?
- A startup launching an AI photo app on S3, Lambda and DynamoDB needs structured threat modeling before launch, prioritizing spoofing and data exfiltration mitigations. Leadership wants documented risks and controls. Which risk assessment solution for cloud architectures using threat modeling and mitigation strategies fits early design?
- A fintech launches a Bedrock chat assistant for investment education in two regions. Regulators require blocking disallowed advice topics, filtering hate and violence, and redacting SSNs and account numbers before logging. Prompts alone have leaked PII in testing. Which Bedrock Guardrails design enforces content filtering and compliance controls?
- A regulated bank is migrating payment processing to AWS. Auditors require single-tenant hardware key storage, customer-exclusive control of key material, and FIPS 140-3 Level 3 validated modules. Shared multi-tenant key services are prohibited. Which key management design meets the dedicated hardware requirement?
- A regulated bank is consolidating 80 AWS accounts after acquisitions, needs consistent guardrails that block risky actions, a standard landing zone for new business units, and self-service account provisioning with approvals. Which organizational design provides automated guardrails, landing zones, and account provisioning?
- A federal contractor stores 7-year signed regulatory filings in S3 and must keep classical ECDSA verification working while adding quantum-resistant signatures for new filings with centralized key control and audit. Which post-quantum cryptography strategy using AWS KMS meets both requirements?
- A fintech company is migrating payment APIs to AWS across three accounts and must show regulators a formal risk assessment with prioritized mitigations before launch. Threats include spoofed partner callbacks and tampered queue messages. Which risk assessment approach best identifies and mitigates these architecture-level threats?
- A bank builds a Bedrock support agent that calls payments APIs on behalf of users, must prove each agent action uses a short-lived scoped identity, enforce per-user consent, and audit which credential accessed each tool. Which access control design secures generative AI tool use?
- A healthcare company in three Regions and 40 accounts must retain audit trails of management actions, Bedrock model prompts and outputs, and configuration drift with centralized security findings. Which centralized logging design captures organization activity, AI invocations, and configuration compliance?
- A logistics company lets a Bedrock agent automatically reroute shipments, must pause before costly reroutes for manager approval via email with timeout and full audit trail, then resume or cancel safely. Which human oversight workflow enforces approval for AI operations?
- A healthcare holding company with 40 AWS accounts needs separate dev, test, and prod OUs, preventive guardrails on regions and encryption, and self-service account creation with approved baselines. Which organizational structure design meets these governance needs?
- A travel company launches a Bedrock chatbot that drafts itineraries and must block self-harm advice, mask passport numbers, and refuse restricted travel-document forgery topics with auditable interventions. Which generative AI compliance control design best enforces this content filtering requirement?
- A healthcare SaaS must prepare document signing and key exchange for quantum resistance. Policy requires NIST-approved lattices for signatures and key establishment, centrally managed keys, and crypto agility without self-built libraries. Which post-quantum cryptography strategy in AWS meets both uses?
- A company builds an agentic assistant that reads calendars, files tickets, and queries HR data on behalf of 5,000 employees. A shared service role with broad access failed least-privilege review and long-lived keys were found in code. Which access control design for agentic AI apps using AgentCore Identity enforces secure delegation?
- A fintech on AWS Organizations uses Bedrock models and needs centralized tamper-evident audit of management events, AI prompts and responses, plus aggregated misconfiguration detection across all accounts. Which centralized logging and configuration design meets these needs?
- An enterprise builds agentic AI support assistants that call CRM and billing APIs on behalf of users, requiring per-user scoping, short-lived credentials, and audit trails of agent actions. Which access control design best secures these agentic AI tool invocations?
- A media group with separate network and workload accounts must share a central VPC subnet, Route 53 zones, and transit connectivity without duplicating infrastructure. Which cross-account resource sharing design enables secure centralized networking?
- A growing enterprise now has 80 AWS accounts created manually with inconsistent baselines, no preventive guardrails, and slow procurement. Security demands centrally managed structure, policy enforcement, and fast compliant account vending. Which organizational design provides governed landing zone provisioning?
- A bank uses generative AI to draft commercial loan decisions, but regulators require a licensed officer to review and explicitly approve any adverse action before notification. Reviews must time out safely, retain audit trails, and prevent autonomous sending. Which human oversight workflow provides approval mechanisms for AI operations with AWS Step Functions?
- A 2,000-employee retailer uses Entra ID for corporate logins and Workday as HR source, and must give AWS console and CLI access with automatic joiner-mover-leaver provisioning and no long-term IAM users. Which identity federation design using standard protocols centralizes workforce access and lifecycle?
- A travel startup builds a mobile app with social sign-in, needs JWTs for APIs plus temporary scoped credentials for direct S3 photo uploads, and runs order jobs on EKS needing AWS API access without stored keys. Which application authentication design using Cognito and Pod Identity meets these needs?
- A 4,000-employee manufacturer uses Microsoft Entra ID as its identity source and operates 60 AWS accounts in Organizations. HR requires new hires to gain AWS access automatically, leavers to be deprovisioned within hours, and users to sign in once with existing credentials. Which identity federation design using standard protocols meets these lifecycle needs?
- A financial organization with 60 AWS accounts uses Amazon Bedrock and must centrally audit management events, Config changes, and Bedrock model invocations for regulators. It needs an organization-wide immutable trail with aggregated compliance views. Which governance control centralizes logging for this AI audit requirement?
- A retail organization uses AWS Organizations with 40 workload accounts and a shared services account hosting a central Transit Gateway and inspection VPC. Workload VPCs must use centralized egress and share a common product image catalog without copying AMIs. Which cross-account resource sharing design centralizes networking and catalog access?
- A bank deploys a Bedrock agent that drafts loan decisions from customer documents, but regulators require a licensed officer to review and approve any denial before notification. Reviews must pause automation, log decisions, and allow rework. Which human oversight workflow enforces approval for AI operations?
- A holding company with 60 AWS accounts must block S3 public access and unapproved Regions even when account owners grant access, including attempts by root. Developers still need flexibility within allowed guardrails. Which policy enforcement design correctly applies SCPs with RCPs for preventive governance?
- A platform team must let 12 member accounts use a central Transit Gateway and shared application subnets without creating VPC peering meshes or duplicating gateways. It must preserve centralized routing with least-privilege access. Which control enables governed cross-account sharing for this network?
- A manufacturing enterprise uses AWS Organizations with separate OUs for engineering, finance, and sandbox, and auditors require that no account can leave the organization, EC2 instances cannot reach the internet directly, and developers cannot launch unapproved regions even via resource policies. Which policy enforcement combination satisfies these guardrails across accounts?
- A fitness startup builds mobile and web apps requiring email and social sign-in, MFA, and temporary access to S3 photos plus personalized API calls. Backend services run on EKS and need scoped AWS permissions without static keys. Which application authentication design meets these needs?
- A bank operates 45 accounts under Organizations with strict CIS benchmarks. Auditors require continuous evidence of noncompliant S3, IAM, and KMS configurations with centralized findings and auto-remediation for public buckets. Which governance design provides automated compliance monitoring with Config and Security Hub?
- A freight company with 8,000 staff uses Okta for workforce login and just acquired a carrier using Microsoft Entra ID. Both groups need SSO to 40 AWS accounts with joiner-mover-leaver provisioning without managing IAM users. Which identity federation design centralizes AWS access with automated lifecycle management?
- A SaaS vendor needs temporary cross-account access to a client's audit bucket scoped to project Atlas, with MFA, no static keys, automatic expiry, and per-project isolation enforced by tags. Which least-privilege design using roles and conditions best meets these constraints?
Cost-Optimized Architecture Design (15%) · 45 questions
- A global media company streams product videos from an S3 bucket in us-east-1 to viewers in North America, Europe, and Asia. Origin fetch fees are spiking during launches, cache hit ratio is below 60%, and an origin outage must not cause playback failures. Which content delivery design best reduces data transfer and network costs while adding failover?
- A multi-account SaaS company with 40 AWS Organizations accounts cannot allocate shared platform spend because teams omit CostCenter and Environment tags on EC2 and S3 resources. Finance requires preventive enforcement on creation plus detection of existing gaps. Which policy-based tagging enforcement design provides preventive and detective cost allocation coverage?
- A SaaS company runs steady-state web APIs on EC2 24/7, nightly batch jobs for 4 hours that tolerate interruption, and spiky dev environments used a few hours weekly. Finance wants lowest cost without changing architecture and with minimal commitment risk. Which purchase mix best matches these usage patterns?
- A financial analytics firm runs nightly risk jobs on EC2 with gp2 volumes showing bursty latency. They need 12,000 IOPS and 800 MiB/s throughput for large sequential scans at minimal cost without paying for unused provisioned IOPS. Which block storage optimization meets the performance target at lowest cost?
- A video rendering farm with 300 EC2 workers runs nightly batch jobs for 8 hours with predictable CPU load, plus occasional daytime spikes for urgent client previews that must start immediately and can be interrupted. Finance demands the lowest cost for the predictable nightly baseline. What purchase mix is optimal?
- A global media startup serves Bedrock-powered video summarization from us-east-1, but European users cause costly cross-Region inference traffic and latency spikes during peak hours. The models are available in eu-west-1 and data residency allows EU processing. Which routing strategy optimizes data transfer costs for AI/ML workloads while preserving performance?
- A genomics lab runs nightly variant-calling pipelines for 6 hours on 200 vCPUs with sustained CPU pressure, plus event-driven image validations that run 400 ms 5 million times monthly. The budget was cut 25% and performance must stay constant while reducing compute and orchestration spend. What cost-optimized design helps?
- A platform team runs shared EKS clusters and Bedrock agents for 12 business units but bills everything to one account with no team-level visibility. Finance requires monthly chargeback by team for compute and separate Bedrock token usage by agent. Which chargeback and showback design allocates shared and AI costs to teams?
- A SaaS provider runs DynamoDB with spiky traffic, Aurora PostgreSQL with steady baseline plus high I/O, and RDS MySQL dev instances idle nights. They need lower bills without code changes. Which database cost optimization matches capacity models to each workload?
- A food-delivery platform orchestrates 12 million short order-status checks monthly, each workflow runs under 40 seconds with many Lambda transitions, and order APIs run on x86 EC2 at 65% CPU. Finance demands lower orchestration and compute bills without latency impact. Which cost-optimized architecture meets these workload requirements?
- A SaaS company runs 200 EC2 instances in private subnets across three AZs fetching data from S3 and DynamoDB through a single NAT gateway. Data transfer charges spiked, with cross-AZ traffic and NAT processing fees dominating. Which network design lowers data transfer and NAT costs while preserving private connectivity?
- A 400-person SaaS company runs 60 AWS accounts for three business units, 40 client projects, and dev, test, and prod environments, but finance cannot map spend and unallocated charges keep growing. Engineers forget tags and names vary by team. Which tagging strategy best establishes consistent cost allocation by business unit, project, and environment?
- A meal-kit company runs order APIs on EC2 Auto Scaling and Fargate services with sharp lunch peaks and idle nights. Finance demands lower cost without breaching p95 latency during surges. Which rightsizing and scaling mix is most effective?
- A SaaS provider runs production EC2 reporting servers with EBS volumes plus ephemeral dev EC2 instances. Finance requires 3-year audit retention for production only, monthly restore validation, and lower backup spend by moving old recovery points to cold tier while deleting dev backups after 14 days. Which backup retention design delivers cost-optimized recovery for this workload?
- A media company with 60 cost centers exceeds its quarterly cloud budget due to overnight transcoding spikes and needs team-level visibility, alerts at 80% spend, and detection of unusual service surges. Which cost monitoring and alerting solution provides budget thresholds and anomaly detection?
- A SaaS API sees weekday peaks, idle nights, and month-end batch spikes on ECS Fargate, with Compute Optimizer flagging 40% over-provisioned CPU and memory. Which rightsizing and scaling strategy best aligns cost with performance metrics?
- A media group with 30 linked accounts sees a 25% bill jump but cannot tell which service, team, or environment caused it and needs daily product-level trends plus ad-hoc chargeback data. Basic billing emails lack detail. Which cost reporting and analytics solution best provides this detailed billing visibility?
- A media firm serves personalized thumbnails from S3 and viewing history in DynamoDB to US and EU users, facing high inter-Region transfer bills from full replication of all buckets and tables. Only curated assets and active profiles need global access. Which replication design balances global performance with transfer cost?
- A SaaS startup runs nightly Bedrock on-demand calls to summarize 500k support tickets, with heavy repeated system prompts and a 6-hour latency tolerance. Costs spiked 4x and throughput is throttled at peak. Which Bedrock cost optimization for AI inference batching and caching should the architect select?
- A media company stores 800 TB of user-uploaded videos with unpredictable access patterns, some files become rarely accessed after 30 days, retrieval must remain in milliseconds when requested, and finance requires automatic cost reduction without application changes or retrieval fees. Which storage tiering design meets these access and cost requirements?
- A SaaS company ingests 3 TB of application logs daily into CloudWatch and keeps everything for a year, causing observability spend to exceed compute. Engineers need error diagnostics for 30 days and audit access for a year. Which cost-effective observability design with log filtering and retention optimization lowers cost?
- A SaaS enterprise with 80 AWS accounts needs mandatory owner and cost-center tags on EC2 and RDS, must block noncompliant launches and surface drift for finance chargeback. Which policy-based tagging design enforces cost allocation visibility?
- A media startup serves 2M Bedrock image prompts monthly with spiky traffic, repeated similar prompts, and nightly bulk tagging jobs. Inference cost is soaring while p95 latency remains flexible overnight. Which cost-optimized AI design lowers Bedrock spend while preserving quality?
- A database team runs a 2-TB PostgreSQL instance needing 12,000 IOPS with bursty throughput, costs have spiked on Provisioned IOPS volumes, performance must stay consistent, and they want independent scaling of IOPS and throughput without overprovisioning. Which block storage selection controls IOPS cost while meeting performance?
- A SaaS connects 40 VPCs to shared services, moving 30 TB monthly east-west with bursty inspection needs, debating Transit Gateway versus PrivateLink for service consumption. Which cost-effective network architecture considering Transit Gateway processing and PrivateLink pricing models minimizes data charges?
- A global streaming platform serves 20M requests daily from an ALB origin in one Region, seeing high origin load, cache misses on popular videos, and outages when the origin fails. Viewers span continents and demand low latency with resilient failover. Which content delivery design using origin selection caching and failover should the architect implement?
- A biotech firm runs steady-state genomics APIs on EC2 using 60% average CPU all year plus nightly batch jobs that tolerate interruptions and finish in 3 hours. Budgets are tight and availability matters for APIs. Which purchase option mix based on usage patterns minimizes cost while preserving availability?
- A global retailer serves product images from S3 and dynamic pricing from an ALB origin, suffers high origin load during sales, needs high cache hit ratios, reduced cross-region origin fetches, and automatic failover for static assets. Which content delivery design optimizes caching and origin resilience?
- A SaaS company has five product teams sharing AWS accounts, plus shared networking costs and growing Amazon Bedrock token spend per team. Finance requires monthly chargeback invoices that fairly distribute shared costs and Bedrock usage by team. Which cost allocation design delivers accurate team-level chargeback for this environment?
- A global support company runs Bedrock summarization in us-east-1 for agents in the US, EU, and APAC. Cross-Region prompt and attachment transfers are raising data-transfer and latency costs, and single-Region throttling causes retries. Which cross-Region inference routing strategy optimizes data transfer costs for AI workloads?
- A media workload uses DynamoDB with spiky viral traffic and Aurora PostgreSQL with steady production load plus high I/O reporting. Finance requires lower database spend without hurting bursts. Which database cost design aligns capacity modes and reserved capacity to each pattern?
- A media company processes 200 TB monthly between VPCs and S3 in one Region, but NAT gateway and cross-AZ charges are spiking. Traffic must stay private without internet egress, prefer same-AZ paths, and avoid inter-Region hops. Which network cost design reduces data transfer spend?
- An e-commerce company runs nightly 5-hour inventory reconciliation on x86 instances and processes order events through orchestrated workflows with millions of sub-second checks plus occasional multi-hour exception handling flows. Compute dominates the bill and transitions are charged per state change. Which pricing-model architecture minimizes cost for this workload mix?
- A SaaS platform spends heavily on NAT gateway processing and cross-AZ traffic between microservices and S3, needs private access to AWS services, regional data paths, and minimal inter-AZ charges without losing HA. Which network design optimizes data transfer costs?
- A media startup saw a 300% overnight cost spike from a runaway transcoding job and finance now requires immediate alerts on budget thresholds plus detection of unusual spend without static limits. Which cost monitoring and alerting design meets both threshold and anomaly requirements?
- An enterprise with 60 accounts cannot attribute $2M monthly spend to business units, projects, and environments. Teams use inconsistent tag spellings and billing shows unallocated costs. Finance needs enforceable chargeback by next quarter. Which tagging strategy for cost allocation provides accurate visibility?
- A regional insurer runs 400 EBS volumes and 25 RDS databases across two accounts. Finance requires 30 days of instant recovery, 1-year archive for compliance, and centralized backup reporting. Storage spend is 40% over budget. Which backup retention design delivers cost-optimized retention with AWS Backup and DLM?
- A SaaS analytics company runs a dashboard fleet on overprovisioned On-Demand EC2 instances behind an ALB. Traffic peaks 9am-5pm weekdays and is near idle nights and weekends. CPU averages 18% and Compute Optimizer flags overprovisioning. Which rightsizing and scaling strategy lowers cost while preserving daytime responsiveness?
- A photo platform stores 500 TB in us-east-1 S3 with only a curated /published/ prefix needed in eu-west-1 for local reads. It must keep EU latency low while cutting cross-Region transfer and storage spend. Which replication control provides cost-aware multi-Region access for this filtered dataset?
- A SaaS company has 25 spoke VPCs in one Region reading large datasets from Amazon S3 through NAT gateways and Transit Gateway, driving high processing charges. It must preserve private connectivity while cutting data transfer costs. Which network control creates the most cost-effective path for this S3 access?
- A media company stores 800 TB of video masters, project files on EFS, and rarely viewed archives with unpredictable re-access. Storage costs rose 40% while retrieval must stay automatic without code changes. Which storage optimization implements intelligent tiering and lifecycle policies?
- A support platform generates 2M Bedrock summarizations daily with many duplicate tickets, spiky daytime traffic, and repeated system prompts. Inference dominates the AWS bill and p95 latency rises during peaks. Which AI workload optimization combining tier selection, batching, and caching best cuts cost while meeting latency?
- A media firm stores 500 TB in us-east-1 S3 and DynamoDB session tables, must replicate only EU customer prefixes and active sessions to eu-west-1 while minimizing transfer and storage spend. Which cost-aware multi-Region replication design meets resilience with lowest cost?
- A media firm with 12 business units tags all resources by CostCenter but cannot explain monthly variances or allocate shared data-transfer costs. Finance needs hourly, resource-level history queryable by SQL and visual dashboards by team. Which cost reporting design using detailed billing data meets these needs?
- A fintech payments API generates 2 TB of JSON logs daily in CloudWatch and emits high-cardinality custom metrics. Engineers search only error traces for 30 days, compliance needs one year of immutable history, and debug fields inflate ingestion. CloudWatch bills doubled last quarter. Which cost-effective observability design using log filtering, metric aggregation, and retention optimization lowers these costs?
Resilience, Migration, and Business Continuity (15%) · 45 questions
- A manufacturing firm runs on-premises VMware hosting a critical order system with a 15-minute RPO and 1-hour RTO to AWS eu-central-1. The system changes constantly, has limited bandwidth, and must support non-disruptive failover drills. Which continuous replication configuration recovers quickly from incidents within objectives?
- A healthcare company must survive ransomware that compromises admin credentials and deletes backups, meet 7-year immutable retention, and allow recovery testing without altering locked data. Primary data lives in S3 and EBS-backed databases. Which data protection design ensures recoverable immutable backups?
- A logistics company with 450 on-premises servers plans to migrate to AWS in six waves over nine months. Leadership needs a data-driven wave plan that groups applications by dependencies, business criticality, and migration complexity to avoid breaking freight tracking during cutover. What discovery approach creates this plan?
- A payment platform must prove its multi-Region failover meets a 15-minute RTO before a regulatory audit, but the team fears real outages and has no measured recovery evidence. Failover uses Route 53 health checks to an active-passive API. Which failover testing approach safely measures achievable recovery time?
- A bank runs a 30-year-old COBOL core banking system on a mainframe with VSAM files and nightly batch jobs. Leadership requires AWS migration with minimal rewrite risk, phased modernization, automated refactoring where possible, and preserved business logic. Which migration strategy best modernizes this legacy mainframe workload?
- A logistics firm hosts a self-managed PostgreSQL fleet and containerized dispatch services on VMs that drain operations staff. It must migrate to AWS with minimal code changes, gain automated backups and failover, and run containers without managing servers or clusters. Which replatforming combination reduces overhead while preserving compatibility?
- A media company runs a monolithic ticketing app on EC2 with tight coupling and scaling bottlenecks during premieres. It must incrementally extract showtime and payment features to serverless microservices with no big-bang rewrite and safely retire legacy paths after validation. Which refactor approach enables incremental modernization with lowest risk?
- A regional bank must prove quarterly that its payment platform meets RTO and RPO, document gaps, and provide operators with one-click recovery steps for database failover and DNS switchover during audits. Which disaster recovery assessment and recovery procedure combination satisfies testing and execution?
- A regional bank must evacuate 120 VMware VMs running branch teller systems to AWS within 8 weeks with minimal downtime and no application rewrites. Regulators require pilot testing of critical ledgers, staged cutovers by branch, and rollback ability if transactions fail. What migration strategy meets the deadline?
- A fintech runs payment authorization on EKS across two AZs with ALB health checks and CloudWatch latency alarms. Leaders want proof a single AZ loss keeps p99 under 400ms before peak season, with automatic rollback if steady state breaks. Which chaos engineering approach validates AZ resilience with controlled failure?
- A regional grocery chain runs online ordering on EC2 and RDS MySQL in eu-west-1. The board requires RTO under 20 minutes, RPO under 1 minute, and rejects the cost of full active-active. Pilot-light restore tested at 55 minutes. Which disaster recovery strategy meets the stated RTO, RPO, and cost requirements?
- A fintech payment API runs on EC2 across two AZs in one Region and must survive AZ loss, instance failures, and traffic spikes without manual intervention while keeping p99 latency low. Auditors require proven failover and automatic replacement of unhealthy hosts. Which technically resilient architecture delivers redundancy, fault tolerance, and self-healing?
- A manufacturer must protect 80 on-premises VMware VMs running Windows and Linux, needing failback after drills and RTO measured in minutes after a site loss. Snapshots copied nightly miss the recovery window and stall cutover testing. Which continuous replication approach enables rapid, orchestrated recovery into AWS?
- A 40-year-old insurer runs COBOL policy admin on a mainframe with VSAM files and nightly batch windows, facing retiring operators and a mandate to add web APIs and move off the data center in 14 months. Which migration strategy best modernizes this legacy mainframe and database workload?
- A global ticketing platform must survive Regional failure with under five minutes of transaction loss, reroute users automatically within minutes, and prove failover readiness for auditors. The primary runs on ALB with Aurora in us-east-1 and standby in eu-west-1. Which multi-Region disaster recovery solution best meets these replication and failover requirements?
- A university research lab runs a 2 TB on-premises MySQL database for enrollments that must stay writable during term plus 12 TB of genomics datasets on an SMB share that must move with checksum validation. Leadership requires near-zero downtime cutover and post-migration integrity verification. Which database and data migration strategy using DMS and DataSync meets these needs?
- A logistics firm plans to migrate 400 servers from two data centers with undocumented dependencies, tight cutover windows, and business-critical batch jobs that cannot move together. Leadership needs dependency mapping and phased waves. Which discovery design plans migration waves?
- A law firm with strict retention faces ransomware and accidental deletions across S3 case files and EBS volumes backing document servers, requiring immutability, locked backups, and time-bound recovery points. Which data-protection design best resists ransomware and deletion?
- A regional bank runs a three-tier app on EC2, RDS and ALB in eu-west-1 with RTO 1 hour and RPO 15 minutes. Auditors require a scored resiliency assessment and tested recovery steps before go-live. Which disaster recovery assessment procedure using Resilience Hub and Systems Manager delivers both proof and automation?
- A regional retailer runs an Oracle workload on EC2 with 500 GB data in us-east-1. Business requires RPO under 1 hour, RTO under 4 hours for regional outage, with minimal standby cost and no rewrite. Which disaster recovery design meets the stated RTO, RPO, and cost constraints?
- A bank runs multi-tier payments on EC2, RDS Multi-AZ and ALB in eu-west-1 with a 4-hour RTO and must prove recovery quarterly without disrupting production. Which disaster recovery testing approach validates RTO compliance with Resilience Hub?
- A manufacturing firm must exit its on-premises data center in 12 weeks and move 200 VMware virtual machines to AWS without refactoring applications or changing IP dependencies. Continuous replication with minimal cutover downtime is required. Which rehosting migration strategy achieves rapid lift-and-shift with minimal downtime?
- An e-commerce team must validate that losing one Availability Zone does not drop checkout success below 99.9%, needs a controlled blast radius with automatic rollback if latency spikes, and wants reusable hypotheses comparing steady-state metrics before and after faults. Which resilience validation approach proves AZ tolerance safely?
- A manufacturer runs aging MySQL on VMs and containerized schedulers on VMs, spending weekends patching OS and databases while planning an AWS migration with minimal code changes and lower operational overhead. Downtime windows are short and staff is small. Which replatforming strategy using managed services should the migration architect recommend?
- A trading platform runs active-passive in us-east-1 and eu-west-1 with Aurora Global Database, requiring automatic DNS failover in 60 seconds and controlled traffic shifting with rollback. Which multi-Region disaster recovery design using replication and failover features achieves rapid automated recovery?
- A retailer runs checkout on Amazon EKS in us-east-1, needs survival of Regional failure with under 5-minute failover and consistent container images in both sites. Which multi-cluster container strategy provides high availability and disaster recovery?
- A logistics firm runs 80 Windows and Linux servers on VMware on-premises needing sub-5-minute RPO and under 1-hour RTO to eu-west-1 after ransomware. Bandwidth is limited and cutover must be tested non-disruptively. Which continuous replication design enables rapid tested recovery?
- A manufacturer must move a 4 TB Oracle database with continuous plant writes and 80 TB of NFS engineering files to AWS with minimal downtime, preserving permissions and enabling validation before cutover. Which database and data migration strategy best fits this workload?
- A retailer runs a ten-year-old monolithic order system on EC2 with frequent outages. Leadership wants to decompose to microservices and serverless incrementally without a risky big-bang rewrite, keeping the storefront online during migration. Which refactor strategy enables incremental modernization?
- A healthcare SaaS must prove RTO of 2 hours and RPO of 15 minutes for its multi-tier workload, document repeatable failover steps, and continuously assess drift from recovery targets across accounts. Which disaster recovery assessment and procedure design meets audit requirements?
- A retailer runs an Aurora and EKS commerce stack with RTO of one hour and RPO of 15 minutes across Regions. Auditors found restores were never timed and runbooks are untested. Leadership wants repeatable proof of recovery targets. Which disaster recovery testing and validation procedure meets the requirement using Resilience Hub?
- A retail group must migrate 240 VMware, Hyper-V, and bare-metal store and e-commerce applications in seven waves over ten months. Leaders need agentless data collection, visualized service dependencies, cost estimates, and a sequenced wave plan with minimal store disruption. Which discovery and portfolio assessment solution maps dependencies and plans migration waves?
- A healthcare group runs 40 member accounts with PHI databases that require daily backups, cross-account vault copies, and evidence that retention cannot be shortened by workload owners. Which centralized backup governance design meets these business continuity and compliance needs?
- A bank runs core ledgers on an on-premises mainframe with COBOL and VSAM plus Oracle databases. It must reduce data-center exit risk, unlock agile releases, and retain auditability during phased modernization with minimal downtime. Which legacy modernization path fits mainframe and database needs?
- A logistics firm must relocate 200 Windows and Linux servers to AWS in eight weeks with minimal code changes, preserve IP addresses, and allow test cutovers. Which rehosting strategy moves servers with continuous replication and controlled cutover?
- A logistics firm runs shipment tracking on self-managed PostgreSQL and RabbitMQ on EC2 with heavy patching overhead, needing HA, automated backups, and simpler deployment without rewriting apps. Which replatforming strategy best reduces operational overhead?
- A fintech runs a payment API in us-east-1 with an Aurora Global Database standby in eu-west-1 and requires RTO under 5 minutes, automated health-based failover, and a manual safety gate to prevent flapping. Which disaster recovery failover design using health checks and routing controls meets these continuity requirements?
- A national retailer runs checkout microservices on Amazon EKS in us-east-1 with stateless services, ECR images, and DynamoDB global tables. Leadership requires survival of a full Regional outage with minutes-level failover and identical Kubernetes manifests in both Regions. Which multi-cluster container strategy provides high availability and disaster recovery for Amazon EKS?
- A bank must prove its multi-Region payment API meets a 15-minute RTO and 1-minute RPO for auditors. The architecture uses Route 53 failover, Aurora Global Database, and Application Load Balancers. Failover has never been tested under load. Which failover test design measures true recovery times for business continuity?
- A financial group runs 40 accounts under Organizations with PCI data in RDS and EFS across two Regions. Auditors require centrally enforced backup schedules, immutable copies, and cross-account recovery testing without local overrides. Which centralized backup governance design using AWS Backup meets business continuity needs?
- A manufacturer must migrate a 4 TB Oracle database with stored procedures to Aurora PostgreSQL with under 30 minutes downtime, plus 12 TB of NFS engineering files to S3 with permissions preserved. Cutover is in 6 weeks. Which database and data migration strategy combines DMS with DataSync?
- A bank must prove its multi-Region loan system meets RTO and RPO targets, needs quarterly non-disruptive recovery validation, gap reports, and tracked improvements across application stacks. Which disaster recovery testing design provides continuous validation and audit evidence?
- A food-delivery platform processes orders through API Gateway, Lambda, DynamoDB, and SQS during peak dinners. A single AZ outage or Lambda throttle must not drop orders, and failed tasks must recover without manual steps. Which design delivers redundancy, fault tolerance, and self-healing?
- A bank runs a 12-year-old .NET monolith for payments that cannot tolerate downtime or big-bang rewrites. Leaders want incremental moves to microservices and serverless for fraud checks first, then other domains over 18 months. Which refactor modernization pattern enables low-risk incremental decomposition of the monolith?
- A manufacturer runs an ordering system on RDS PostgreSQL and EC2 in eu-central-1 needing RTO under 2 hours, RPO under 15 minutes, and low standby cost. Full active-active is too expensive. Which disaster recovery control meets these business requirements for this workload?
Operational Excellence and Automation (20%) · 60 questions
- A retail platform runs 400 EC2 instances across three OUs and needs monthly OS patching with automated reboot control, failed-patch ticket creation, and concurrency limits to protect checkout. Maintenance windows keep slipping. Which automated runbook design provides controlled patching with integrated incident response?
- A retail platform runs checkout microservices on Amazon ECS Fargate and recommendations on Amazon EKS across three clusters. SREs need per-service CPU, memory, and restart signals with correlated logs without deploying sidecars, and must spot noisy-neighbor issues quickly. Which container observability configuration delivers unified performance and log correlation?
- A mid-size gaming studio with 90 engineers manages 40 AWS accounts for dev, test, and live environments. Developers want to define VPCs and databases with Python classes and loops, but auditors require versioned templates, peer review, and deterministic rollbacks before any production change. How should the team standardize infrastructure as code?
- A retail team deploys a payment API on ECS with ALB that must shift production traffic gradually, monitor errors, and instantly revert to the prior version without DNS changes or redeploys if health fails. Releases run weekly with automated pipeline approvals. Which deployment strategy provides controlled traffic shifting with rapid rollback?
- A regional logistics firm runs 40 EC2 route-optimization workers in an Auto Scaling group behind a Network Load Balancer. Hung processes serve stale routes, impaired instances linger for 30 minutes, and in-flight jobs are killed during scale-in. It needs OS and app failure detection with replacement in under 3 minutes plus graceful draining. Which automated failure recovery design using health checks and replacement best meets these recovery requirements?
- A fintech team runs Python microservices on EC2 and Lambda across three environments. Support needs correlated metrics, logs, and traces with consistent service names, sampling, and no vendor SDK lock-in, visualized in AWS native tools. Which instrumentation approach delivers standardized observability?
- A retailer with 800 EC2 instances suffers inconsistent patching and slow 2 a.m. incident triage that requires log collection, instance isolation, and scaling actions. Operations wants standardized automated responses with approvals and audit trails. Which automated runbook design standardizes patching and incident response with governance?
- A logistics team manages 200 CloudFormation stacks and needs reusable TypeScript networking constructs with unit tests, deterministic previews, and drift handling while keeping declarative state. Developers prefer imperative logic over raw YAML. Which infrastructure-as-code approach delivers reusable tested components with declarative deployment?
- An e-commerce team runs 120 ECS services and an EKS cluster for recommendations. During flash sales, they struggle to pinpoint CPU-throttled tasks, pod restarts, and service dependencies quickly in one view with actionable alarms. Which monitoring solution provides container-aware observability?
- A fintech operates 50 accounts emitting CloudWatch Logs for audit, needs near-real-time security analysis centrally, plus immutable 7-year archives with low-cost retention. Network controls prohibit polling each account from the central account. Which multi-account log aggregation design meets streaming and archival needs?
- A microservices platform on EKS and Lambda suffers slow checkout traces spanning queues and APIs. Engineers need correlated metrics, logs, and traces with consistent context across services using open standards and minimal code changes without vendor lock-in. Which observability design provides standardized instrumentation and end-to-end visibility?
- A fintech with 60 AWS accounts must ensure no S3 bucket is ever public and any unencrypted RDS instance is auto-remediated before audit. Platform engineers use CDK and CloudFormation for deployments and need guardrails that block bad templates early while fixing existing drift continuously. What governance design works?
- A fintech payments platform must page on-call engineers within two minutes when API error rates spike, notify support by email for warnings, and run an automated runbook to restart the service for critical faults. Alerts must avoid noise during deployments. Which alerting solution best meets these detection and response requirements?
- A fintech operates 45 AWS accounts with app logs in CloudWatch Logs and must retain seven years for regulators. Security wants one searchable archive, encrypted and tamper-evident, with tiered storage for cost control. Which observability design delivers centralized multi-account log aggregation with tiered archival?
- A platform team manages 80 AWS accounts with CloudFormation and CDK, but developers repeatedly deploy non-encrypted S3 buckets and oversized EC2 types, with drift detected weeks later. Leadership wants violations blocked before deploy plus auto-remediation. Which policy-as-code design provides proactive validation, enforcement, and drift remediation?
- A telehealth startup deploys Terraform and CloudFormation from GitHub Actions to three environments. Security forbids plaintext database passwords in code, requires rotation every 30 days, and audit of each retrieval. How should secrets be managed in pipeline code?
- A retailer runs 120 EKS microservices across three clusters with frequent OOMKills and noisy-neighbor CPU throttling, but engineers lack pod-level CPU, memory, and restart correlations with application logs. Which monitoring solution for containerized applications resolves pod performance and log correlation?
- A 40-person platform team manages 30 AWS accounts with repeatable VPCs and needs reviewable infrastructure changes, reusable networking constructs in TypeScript, and drift-safe deployments through pipelines. Which infrastructure-as-code approach combining declarative and imperative paradigms best meets the standardization need?
- A global gaming studio runs 30 AWS accounts for matchmaking and live events, generating high-volume VPC flow and application logs that security must search within seconds while finance requires low-cost seven-year retention for compliance. Which centralized logging design delivers near-real-time analysis with durable tiered archiving?
- A fraud team runs a SageMaker real-time model plus a Bedrock agent that issues refunds, but false approvals rose after a data shift and agent tool calls now take seconds longer. Leaders need dashboards tying predictions, latency, and drift together. Which observability solution best monitors these model, agent, and latency signals?
- A regional retailer deploys storefront services with AWS CDK pipelines to dev, staging, and production, and developers currently commit encrypted database strings in code that block rotation and expose values in diffs. The team needs versioned secrets per environment, automatic rotation for RDS, and no plaintext in templates or logs. Which secrets management approach secures infrastructure code for these environments?
- An e-commerce team misses overnight checkout failures because CloudWatch metrics sit unwatched and on-call learns from customers. They need immediate paging, ticket context, and one-click remediation for known faults. Which alerting design provides timely detection with automated response?
- A gaming studio must roll out VPCs, roles, and GuardDuty detectors to 40 accounts across three Regions from one pipeline, with automatic rollout, failure containment, and drift visibility. Which IaC deployment model meets this?
- A regulated insurer deploys CloudFormation and CDK across 50 accounts and must block non-encrypted S3 buckets before deployment, flag violations in pipelines, and auto-remediate drift after deployment. Which policy-as-code design provides proactive validation, enforcement, and drift remediation?
- A regulated bank manages 80 AWS accounts under AWS Organizations and must deploy baseline VPCs, logging roles, and guardrails to all accounts in three Regions. Updates must roll out centrally with automatic deployment to new accounts and rollback on failure. Which multi-account multi-Region deployment design enforces consistent infrastructure as code?
- A fintech runs a SageMaker fraud model plus Bedrock agents for support, needing alerts on inference latency spikes, prediction accuracy drop, and agent tool failures. MLOps wants unified dashboards. Which observability design for AI workload metrics including drift and agent performance provides complete detection?
- A global freight company maintains a Java order-tracking service in CodeCommit running on Amazon EC2 Auto Scaling behind an ALB. Leadership requires automated builds with unit tests on every commit, blue/green EC2 deployments with automatic rollback on CloudWatch alarms, and a single orchestrated pipeline view. Which CI/CD orchestration design meets these deployment pipeline requirements?
- A travel marketplace reports checkout timeouts that backend metrics miss, needs proactive alerts from major regions and real browser latency by page and journey. Which user-experience monitoring design captures synthetic and real-user checkout visibility?
- A SaaS company runs 200 EC2 instances with mission-critical API latency. Operations needs instant paging on high CPU and failed status checks, plus automated restart runbooks with audit trail. Which alerting design delivers real-time notifications and automated remediation with governance?
- A platform team manages CloudFormation and Terraform for 40 microservices that need database passwords and API tokens injected at deploy time, requires automatic rotation every 30 days, fine-grained IAM per secret, and no plaintext values in Git or state files. Which secrets handling approach for infrastructure code meets these governance needs?
- A bank deploys a SageMaker credit model with 50ms SLA, nightly retraining, and Bedrock agents assisting analysts. Drift and slow agent tool calls recently caused mis-scores. Which monitoring design tracks model performance, inference latency, agent behavior, and drift?
- A fintech team stores microservice code in CodeCommit and must build Docker images, run security scans, and deploy progressively to ECS with manual approval for production. Build artifacts must be traceable across stages. Which CI/CD orchestration design automates build and deployment pipelines with governance?
- A software vendor ships regulated container images weekly through CodePipeline, needing automated OS vulnerability scans on every push, blocking of critical findings, and cryptographic signing before production deployment. Audit requires scan evidence and image provenance. Which pipeline security scanning for vulnerabilities and artifact signing should the architect configure?
- A fintech API on EKS must meet 99.9% success and p95 latency under 300 ms, needs burn-rate alerts to page before budget exhaustion. Which SLO design creates measurable indicators and alerts with Application Signals?
- A travel booking site gets complaints of slow checkout but backend metrics look healthy, spanning desktop and mobile users across continents. Product needs proactive alerts plus real failure diagnostics. Which user experience monitoring strategy using synthetic transactions and real user monitoring reveals true checkout friction?
- A healthcare company manages 28 member accounts across three Regions from an Organizations management account. It must deploy standard audit S3 buckets, IAM roles, and Config rules everywhere, auto-apply baselines to new accounts in an OU, and let the security tooling account manage deployments without using management credentials. Versioned templates are required. Which multi-account multi-Region infrastructure deployment design using StackSets delivers this baseline?
- A SaaS company runs dev, test, and prod in separate AWS accounts across two Regions. Leaders require one pipeline that deploys with delegated least-privilege roles, promotes the same immutable build artifact between stages, and blocks prod without manual approval. Which pipeline deployment design satisfies multi-account promotion?
- An online education platform deploys a Java application to an EC2 Auto Scaling fleet. Code lives in CodeCommit, builds need compilation and unit tests, production needs blue/green deployment with automatic rollback on CloudWatch alarms, and managers require an explicit approval before production release. Audit history is required. Which CI/CD pipeline orchestration design using CodePipeline, CodeBuild, and CodeDeploy meets these release requirements?
- A travel booking site reports checkout failures only from users in Asia, synthetic uptime checks pass in us-east-1, and product wants both proactive alerting and actual page-load breakdowns by browser and geography. Which user-experience monitoring strategy captures synthetic coverage and real-user detail?
- An e-commerce platform runs flash sales that exhaust EC2 quotas and RDS connections, causing checkout failures. Operations needs early warning of capacity pressure plus automated runbook execution. Which health monitoring and operational response design best prevents quota-driven outages during demand spikes?
- A SaaS team builds containers in CodePipeline across dev and prod accounts, must block images with critical CVEs from being promoted, sign images for admission, and track findings centrally. Which pipeline security scanning and signing design satisfies these controls?
- A checkout team misses its 99.9% success promise because availability is tracked by server CPU and ad hoc log searches. Leaders want a measurable user-focused objective with burn-rate alerts for on-call response. Which SLO design with measurable indicators and alerts best fits CloudWatch and Application Signals?
- A video transcoding platform sees overnight queue backlogs and throttled API calls that on-call discovers late. Leaders want early warnings, quota visibility, and automated remediation without manual console fixes. Which health monitoring, capacity planning, and operational response design best applies CloudWatch, EventBridge, Systems Manager, and quotas?
- An e-commerce platform uses Lambda to restart degraded ECS tasks when alarms fire. During a partial outage the remediator invoked hundreds of restarts per minute, throttled the ECS API, and worsened the incident. Which controlled remediation design adds safety constraints to automated restarts while preserving recovery?
- A bank must promote tested CodePipeline artifacts from a tools account through dev, staging, and prod accounts in two Regions, enforcing least-privilege cross-account access and immutable promoted binaries. Which deployment pipeline configuration best achieves this?
- A fintech builds containers in CodeBuild and pushes to Amazon ECR for regulated payment services requiring vulnerability reports before deploy and tamper-proof images. Which pipeline security scanning design assesses vulnerabilities and signs artifacts?
- A support team launched an Amazon Bedrock RAG chatbot that cites policies, but answers drift and compliance worries grow. Product owners require repeatable quality scores, detection of harmful or hallucinated replies, and regression comparison across prompts. Which validation approach evaluates AI outputs rigorously?
- A payments API must meet 99.9% success and p99 latency under 400 ms, needs burn-rate alerts before breach, service-map context, and monthly compliance reports. Which service-level objective design provides measurable indicators and alerts?
- An e-commerce platform has predictable weekday spikes at 9 a.m., flash-sale surges, and steady baseline traffic on EC2 Auto Scaling groups behind an ALB. The team wants low latency during spikes without overprovisioning overnight. Which auto scaling policy combination maintains performance with cost-efficient metric-based scaling?
- A retail team runs checkout on Amazon ECS Fargate behind an ALB and had a failed deploy that needed a 30-second recovery. They now require production testing of the new version and one-click shift back to the stable task set. Which deployment strategy gives instant rollback for this container service?
- A SaaS team runs dev, staging, and prod in separate accounts and deploys to us-east-1 and eu-west-1. Auditors require artifacts promoted unchanged between stages, least-privilege cross-account deploys, and full pipeline history. Builds already run in CodeBuild. Which multi-account deployment pipeline provides role delegation with artifact promotion?
- A bank is adding an Amazon Bedrock RAG assistant for loan advice in a regulated CI/CD pipeline. Product and compliance teams must score groundedness, toxicity, and helpfulness on every model and prompt change and block unsafe releases. Recent manual spot checks missed hallucinations. Which AI output validation control provides repeatable release gating for the assistant?
- A SaaS platform built an EventBridge-triggered Lambda that restarts unhealthy services, but a bad deployment caused it to thrash hundreds of instances and saturate APIs. Leadership wants remediation to continue automatically under strict safety limits. Which controlled remediation design enforces safety constraints with circuit breakers and backoff?
- A university research portal serving 80 departments runs API Gateway, Lambda, and Aurora Serverless with 10x traffic during enrollment week, needing latency alerts, quota exhaustion warnings, and automatic remediation without paging on-call staff. Which health monitoring and automated response design provides early warning and self-healing capacity management?
- A health startup adds a Bedrock RAG assistant that summarizes discharge notes. Clinicians report occasional hallucinations. Product needs repeatable quality scores, safety checks for toxicity, and clinician review before release. Release cycles are weekly. Which evaluation approach validates AI outputs with Bedrock Evaluations?
- An EKS platform runs Java, Python, and Node.js microservices with inconsistent tracing and missed alerts. Leaders require standardized metrics, logs, and traces correlated by request across services without rewriting each SDK. Which observability control provides standardized instrumentation for this polyglot cluster?
- An e-commerce checkout calls a fragile fraud API that times out under load, and the team needs automatic retries without overwhelming it plus fast fallback when failures exceed thresholds. Which controlled remediation design with safety constraints protects checkout reliability?
- A SaaS runs checkout on ECS Fargate behind an ALB with Auto Scaling and order processing on Lambda with SQS. Unhealthy tasks occasionally serve 500s and failed messages disappear without retry. Which automated failure recovery using health checks and replacement restores service?
- A travel booking platform runs stateless services on Amazon EKS behind an ALB where a recent rolling update caused cascading 500s because faulty pods received live traffic immediately and rollback required redeploying old manifests. The team needs progressive traffic shifting, automatic health-based rollback, and zero code changes to manifests. Which deployment strategy provides safe rollback for this EKS workload?
- A B2B analytics platform runs its API on EC2 Auto Scaling behind an ALB. Traffic jumps sharply at 8 a.m. on weekdays, baseline demand grows 5% monthly, and leaders want capacity provisioned before the spike while keeping average CPU near 50% all day. Which auto scaling policy combination provides proactive scaling with stable utilization for this workload?
These questions are original practice material and are NOT actual exam questions or brain-dump content. Amazon Web Services (AWS) and related marks are trademarks of their respective owners. This material is not affiliated with, endorsed by, or sponsored by Amazon Web Services (AWS).