Courseiva

CCNA Accelerate Workload Migration and Modernization Questions

31 of 331 questions · Page 5/5 · Accelerate Workload Migration and Modernization · Answers revealed

Practice these questionsDomain overviewAll questions
301
MCQhard

A company is migrating a legacy CRM application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to minimize licensing costs. The current on-premises deployment uses a single server. Which migration strategy should the company use?

A.Rehost the application on Amazon EC2 and install the same proprietary database on an EC2 instance.
B.Rehost the application, but replace the database with a SaaS alternative.
C.Refactor the application to use a different database engine that is supported by Amazon RDS.
D.Use AWS Database Migration Service (DMS) to migrate the database to Amazon RDS.
AnswerA

Rehosting with the same database minimizes licensing costs.

Why this answer

Rehosting (lift-and-shift) the application on EC2 with the same proprietary database minimizes licensing costs by using existing licenses, and avoids the need to refactor or replace the database. Option B is wrong because replacing the database with a SaaS alternative may increase costs and complexity. Option C is wrong because refactoring to use a different database engine would require significant application changes and may incur new licensing costs.

Option D is wrong because DMS cannot migrate to a proprietary database unsupported by RDS, and RDS does not support the proprietary database.

Practice this question →
302
Multi-Selectmedium

A company is migrating a multi-tier web application to AWS and wants to use Infrastructure as Code (IaC) to automate provisioning. Which AWS services can the company use to define and manage infrastructure declaratively? (Choose TWO.)

Select 2 answers
A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS OpsWorks
D.AWS Cloud Development Kit (CDK)
E.AWS CodeDeploy
AnswersB, D

CloudFormation allows declarative infrastructure as code.

Why this answer

AWS CloudFormation and AWS CDK are correct because both allow declarative infrastructure definition. AWS Elastic Beanstalk is a PaaS service, not dedicated Infrastructure as Code. AWS OpsWorks is configuration management.

AWS CodeDeploy is for deployment automation.

Practice this question →
303
MCQhard

A company is planning to migrate a large-scale e-commerce platform from on-premises to AWS. The platform includes a web tier, application tier, and a MySQL database. The company needs to ensure high availability and scalability. Which combination of AWS services should the company use to modernize the application architecture while minimizing operational overhead?

A.Use Elastic Load Balancer, Amazon EC2 instances for the web tier, and Amazon ECS with Fargate for the application tier, and Amazon RDS for MySQL.
B.Use Application Load Balancer, Amazon ECS with Fargate for both web and application tiers, and Amazon Aurora MySQL.
C.Use Amazon CloudFront, Amazon EC2 instances for the application tier, and Amazon DynamoDB.
D.Use Amazon EC2 Auto Scaling groups for both web and application tiers, and Amazon RDS for MySQL with Multi-AZ.
AnswerB

Fargate eliminates server management, and Aurora provides managed MySQL with high availability.

Why this answer

It uses a managed container service (ECS with Fargate) for both web and application tiers, eliminating server management overhead, and Amazon Aurora MySQL provides a MySQL-compatible, highly available, and scalable managed database. Option A is incorrect because although it includes a load balancer and ECS with Fargate for the application tier, it uses unmanaged EC2 instances for the web tier, increasing operational overhead. Option C is incorrect because it proposes DynamoDB, which is NoSQL and not suitable for a MySQL-based e-commerce platform.

Option D is incorrect because it uses EC2 instances for both tiers, requiring more manual management compared to a containerized solution.

Practice this question →
304
Multi-Selectmedium

A company is migrating a large number of files from on-premises to Amazon S3. The files are accessed frequently and require low latency. Which TWO AWS services can help accelerate the migration? (Choose TWO.)

Select 2 answers
A.AWS Storage Gateway
B.AWS CloudFormation
C.AWS DataSync
D.Amazon S3 Transfer Acceleration
E.AWS Snowball Edge
AnswersC, E

DataSync automates and accelerates data transfer.

Why this answer

Correct answers: C (AWS DataSync) and E (AWS Snowball Edge). AWS DataSync automates and accelerates transferring large amounts of data over the network, making it ideal for frequent, low-latency access. AWS Snowball Edge is a petabyte-scale data transport solution that uses secure physical devices to transfer large datasets offline, bypassing network constraints.

Option A (AWS Storage Gateway) is a hybrid storage service, not a migration accelerator. Option B (AWS CloudFormation) is for infrastructure as code, not data transfer. Option D (Amazon S3 Transfer Acceleration) speeds up uploads but is a feature of S3, not a standalone migration service.

Practice this question →
305
MCQhard

A company is migrating a 10 TB Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downtime and support ongoing replication. The application uses stored procedures and advanced Oracle features. The company has already set up an AWS DMS replication instance and validated connectivity. However, during the full load, DMS reports errors for certain tables containing LOBs. What is the most likely cause and solution?

A.The DMS replication instance does not have enough memory. Increase the instance size.
B.The target Aurora PostgreSQL cluster does not have enough storage. Increase the allocated storage.
C.The LOB mode is set to 'Limited LOB mode' and some LOBs exceed the maximum allowed size. Set LOB mode to 'Full LOB mode'.
D.The source database is not configured for change data capture (CDC). Enable supplemental logging.
AnswerC

Limited LOB mode has a size limit; Full LOB mode handles large LOBs but may impact performance.

Why this answer

AWS DMS uses 'Limited LOB mode' by default for Oracle to Aurora PostgreSQL migrations, which truncates LOBs larger than the allowed size (default 32 KB). When LOBs exceed this limit during full load, DMS reports errors. Setting LOB mode to 'Full LOB mode' bypasses this size restriction, allowing DMS to migrate LOBs of any size.

Option A is incorrect because memory issues typically cause performance degradation, not specific LOB errors. Option B is incorrect because storage capacity on the target does not affect LOB loading; Aurora PostgreSQL scales automatically. Option D is incorrect because CDC (Change Data Capture) configuration is for ongoing replication, not for full load of LOBs.

Practice this question →
306
Multi-Selecteasy

A company is migrating an on-premises application to AWS and wants to implement a continuous integration/continuous delivery (CI/CD) pipeline. Which TWO AWS services should the company use to build the pipeline?

Select 2 answers
A.AWS Cloud9
B.AWS CodePipeline
C.AWS CodeCommit
D.AWS CodeArtifact
E.Amazon CodeGuru
AnswersB, C

AWS CodePipeline is a fully managed CI/CD service that automates the build, test, and deploy phases of a release process. It is the correct service for building a CI/CD pipeline.

Why this answer

AWS CodePipeline is a fully managed CI/CD service that automates the build, test, and deploy phases. AWS CodeCommit is a managed source control service that hosts Git repositories. Together, they form a robust CI/CD pipeline.

AWS Cloud9 is an IDE, not a CI/CD service. AWS CodeArtifact is for artifact management, and Amazon CodeGuru provides code reviews and performance recommendations. Therefore, the correct answers are AWS CodePipeline (B) and AWS CodeCommit (C).

Practice this question →
307
MCQeasy

A company is migrating a monolithic Java application to AWS. The current architecture uses a single Oracle database. The migration plan is to refactor the application into microservices and use separate Amazon RDS for PostgreSQL databases per service. The company also wants to implement a CI/CD pipeline using AWS CodePipeline and AWS CodeBuild. Which tool should the company use to automate the database schema changes for each microservice?

A.Flyway, integrated into the CI/CD pipeline to run database migrations as part of the application deployment.
B.AWS Database Migration Service (DMS) to continuously replicate schema changes from the source Oracle database.
C.AWS CloudFormation with custom resource Lambda functions to run SQL scripts.
D.AWS CLI scripts executed in CodeBuild to run SQL commands against the target databases.
AnswerA

Flyway is a well-known database migration tool that can be integrated into CodePipeline for versioned schema changes.

Why this answer

Flyway is a database migration tool that integrates directly into CI/CD pipelines, allowing schema changes to be version-controlled and applied automatically during application deployment. For a microservices architecture with separate PostgreSQL databases, Flyway can manage each service's schema independently, ensuring consistency and rollback capability. This aligns with the requirement to automate schema changes per microservice as part of the migration and modernization effort.

Exam trap

The trap here is that candidates may confuse data migration tools (like AWS DMS) with schema migration tools, or assume that any scripting approach (like AWS CLI) is sufficient, overlooking the need for version control, repeatability, and integration with application deployment pipelines that Flyway provides.

How to eliminate wrong answers

Option B is wrong because AWS DMS is designed for continuous data replication and one-time migrations, not for managing version-controlled schema changes in a CI/CD pipeline; it does not integrate with application deployment workflows. Option C is wrong because AWS CloudFormation with custom Lambda functions is overly complex and not purpose-built for database schema migrations; it lacks built-in versioning, rollback, and migration sequencing that tools like Flyway provide. Option D is wrong because AWS CLI scripts executed in CodeBuild to run SQL commands are fragile, error-prone, and lack version control, dependency management, and repeatability; they do not handle migration history or rollbacks reliably.

Practice this question →
308
MCQeasy

A company wants to assess its on-premises environment for migration to AWS. The assessment should include server utilization, dependencies, and recommendations. Which AWS service provides this capability?

A.AWS Application Discovery Service
B.AWS CloudFormation
C.AWS Migration Hub
D.AWS Systems Manager
AnswerA

Application Discovery Service collects data about on-premises servers, including utilization and dependencies.

Why this answer

AWS Application Discovery Service is the correct answer because it directly performs the assessment described: it collects data on on-premises server utilization, network dependencies, and provides migration recommendations. AWS Migration Hub (C) tracks migration progress but does not perform discovery. AWS CloudFormation (B) provisions resources, and AWS Systems Manager (D) manages instances, neither of which provide discovery capabilities.

Practice this question →
309
MCQeasy

A company is migrating an on-premises Oracle database to AWS. The database is 2 TB in size and has a low-latency connection to AWS via AWS Direct Connect. The company wants to minimize downtime during the migration. Which AWS service should the architect use for the initial data load?

A.AWS DataSync
B.AWS Snowball Edge
C.AWS Server Migration Service (AWS SMS)
D.AWS Database Migration Service (AWS DMS)
AnswerD

AWS DMS supports continuous replication, minimizing downtime.

Why this answer

AWS Database Migration Service (AWS DMS) with Oracle as source and target (e.g., RDS for Oracle) supports ongoing replication to minimize downtime. AWS Snowball is for offline data transfer and would involve longer downtime. S3 Transfer Acceleration is for S3 uploads, not database migration.

Server Migration Service is for server migration, not databases.

Practice this question →
310
MCQmedium

A company is migrating a web application to AWS and wants to automatically scale the application based on CPU utilization. The application runs on a set of EC2 instances behind an Application Load Balancer. Which combination of AWS services should they use?

A.AWS Lambda with scheduled scaling
B.Amazon CloudFront with origin scaling
C.AWS Elastic Beanstalk with environment scaling
D.Auto Scaling group with a simple scaling policy based on CloudWatch CPU alarm
AnswerD

Auto Scaling group can scale based on CPU utilization.

Why this answer

Auto Scaling group with a simple scaling policy based on a CloudWatch CPU alarm. This directly scales EC2 instances in response to CPU utilization, providing automatic scaling. Option A is incorrect because AWS Lambda with scheduled scaling does not dynamically respond to CPU utilization; it's time-based.

Option B (Amazon CloudFront) is a content delivery network, not a scaling mechanism. Option C (Elastic Beanstalk) manages environments but the underlying scaling relies on Auto Scaling groups; the question asks for the combination of services, and the core scaling service is the Auto Scaling group. Therefore, D is the correct choice.

Practice this question →
311
MCQeasy

A company is migrating its on-premises file server to AWS. The file server contains 50 TB of data stored on a Windows Server with NTFS permissions. The company needs to maintain the folder structure and permissions after migration. The migration must be completed within one week. The company has a 100 Mbps internet connection. Which approach should the solutions architect recommend?

A.Use AWS Storage Gateway File Gateway to cache data on-premises and sync to S3.
B.Use AWS Snowball Edge to transfer data to an S3 bucket, then use AWS DataSync to copy to Amazon FSx for Windows File Server.
C.Use AWS DataSync to transfer data directly to Amazon EFS over the internet.
D.Use AWS CLI to copy data directly to an S3 bucket, then mount S3 as a file system.
AnswerB

Offline transfer bypasses bandwidth; FSx preserves Windows permissions.

Why this answer

Given the large data size (50 TB) and limited bandwidth (100 Mbps), transferring over the internet would take approximately 46 days, exceeding the one-week window. AWS Snowball Edge provides a physical data transport solution that bypasses bandwidth constraints. After transferring data to an S3 bucket via Snowball Edge, AWS DataSync can be used to copy the data to Amazon FSx for Windows File Server, preserving folder structure and NTFS permissions.

Option A (Storage Gateway File Gateway) still requires initial network transfer, which is too slow. Option C (DataSync directly to EFS) would also be too slow over the internet and EFS does not support NTFS ACLs. Option D (CLI to S3 and mount) loses permissions and is also bandwidth-limited.

Practice this question →
312
MCQmedium

A company is planning to migrate a large-scale Hadoop cluster to Amazon EMR. The cluster currently processes batch jobs using a mix of MapReduce and Spark. The company wants to minimize changes to the existing code and operational processes. Which migration approach should the architect recommend?

A.Refactor all jobs to use only Apache Spark on Amazon EMR
B.Retire the cluster and use Amazon Athena for ad-hoc queries
C.Replatform the data processing to use Amazon Redshift Spectrum
D.Rehost the cluster on Amazon EMR using the same MapReduce and Spark configurations
AnswerD

This preserves existing code and processes, minimizing changes.

Why this answer

Rehosting the Hadoop cluster on Amazon EMR with the same configuration allows the existing MapReduce and Spark code to run with minimal changes. Refactoring to use only Spark would require code changes. Replatforming to Amazon Redshift would change the architecture.

Retiring and using Athena would require significant changes to data storage and queries.

Practice this question →
313
Multi-Selectmedium

A company is migrating a critical application to AWS and must ensure high availability across multiple Availability Zones. Which TWO AWS services can be used to distribute traffic across instances in multiple AZs?

Select 2 answers
A.Amazon CloudFront
B.AWS Global Accelerator
C.Application Load Balancer (ALB)
D.Amazon Route 53
E.Network Load Balancer (NLB)
AnswersC, E

ALB distributes traffic across targets in multiple AZs.

Why this answer

The correct answers are C (Application Load Balancer) and E (Network Load Balancer). Both ALB and NLB are regional load balancers that can distribute traffic across targets in multiple Availability Zones, providing high availability. CloudFront (A) is a global content delivery network, not a regional load balancer.

Route 53 (D) is a DNS service that can route traffic but does not perform load balancing across instances. Global Accelerator (B) uses edge locations and typically routes to a regional load balancer, but it is not itself a load balancer that distributes traffic across AZs.

Practice this question →
314
MCQeasy

A company is migrating an on-premises Oracle database to Amazon Aurora PostgreSQL. They need to minimize downtime and ensure data integrity. Which AWS service should they use for the migration?

A.AWS Schema Conversion Tool (SCT)
B.AWS Database Migration Service (DMS)
C.AWS DataSync
D.AWS Snowball Edge
AnswerB

DMS supports ongoing replication to minimize downtime.

Why this answer

AWS Database Migration Service (DMS) supports homogeneous and heterogeneous migrations with minimal downtime. Option A is wrong because SCT only helps with schema conversion, not the actual data migration. Option C is wrong because DataSync is for file storage, not databases.

Option D is wrong because Snowball Edge is for large-scale offline data transfer, not online database migration.

Practice this question →
315
Multi-Selecthard

A company is modernizing a monolithic application into microservices on AWS. The application currently uses a single SQL database. Which THREE AWS services can help decouple the data layer and enable event-driven communication between microservices?

Select 3 answers
A.Amazon Simple Notification Service (SNS)
B.Amazon RDS
C.Amazon Simple Queue Service (SQS)
D.Amazon ElastiCache
E.Amazon EventBridge
AnswersA, C, E

Decouples via pub/sub.

Why this answer

Amazon SQS provides message queuing for async communication. Amazon SNS enables pub/sub messaging. Amazon EventBridge provides event bus for decoupled communication.

Amazon RDS is a relational database, not for decoupling. Amazon ElastiCache is caching.

Practice this question →
316
Multi-Selecthard

A company is migrating a legacy application to AWS and needs to decouple the application components. The application currently uses a monolithic architecture with direct calls between components. Which AWS services can help decouple the components? (Choose THREE.)

Select 3 answers
A.Amazon Simple Queue Service (SQS)
B.Amazon Simple Notification Service (SNS)
C.AWS Step Functions
D.Amazon Kinesis Data Streams
E.Amazon EventBridge
AnswersA, B, E

SQS provides message queues for asynchronous communication.

Why this answer

Amazon SQS (Option A), Amazon SNS (Option B), and Amazon EventBridge (Option E) are correct because they all enable asynchronous messaging and event-driven decoupling between application components. SQS provides message queues for decoupling producers and consumers, SNS supports pub/sub messaging, and EventBridge routes events from various sources. AWS Step Functions (Option C) is designed for orchestrating workflows, not primarily for decoupling.

Amazon Kinesis Data Streams (Option D) is used for real-time streaming analytics, not general decoupling.

Practice this question →
317
MCQhard

A company is migrating its on-premises Oracle database to Amazon Aurora PostgreSQL using AWS DMS. The database has several large tables with hundreds of millions of rows. The migration must complete within a 2-hour downtime window. During the full load, DMS is running slowly on large tables. What should the company do to improve performance?

A.Disable foreign key constraints on the target during migration.
B.Use a smaller DMS instance to avoid network bottlenecks.
C.Set the LOB mode to 'Limited LOB mode' with a high max LOB size.
D.Partition the large tables on the source and target, and use multiple DMS tasks.
AnswerD

Partitioning large tables enables parallel loading with multiple DMS tasks, which is the most effective way to speed up the full load within a tight downtime window.

Why this answer

Partitioning the large tables on both source and target allows AWS DMS to load multiple partitions in parallel using separate tasks, significantly improving throughput. Option A is incorrect because disabling foreign key constraints can cause data integrity issues and is not recommended for performance. Option B is incorrect because using a larger DMS instance would help, not a smaller one.

Option C is incorrect because while LOB mode settings matter, they are not the primary bottleneck for full load of large tables; the key is parallelism via partitioning.

Practice this question →
318
Multi-Selecteasy

Which TWO AWS services can be used to migrate on-premises applications to AWS without modifying the application code?

Select 2 answers
A.AWS DataSync
B.AWS VM Import/Export
C.AWS Application Migration Service (MGN)
D.AWS Database Migration Service (DMS)
E.AWS App2Container
AnswersB, C

Imports VMs as-is.

Why this answer

AWS VM Import/Export allows importing VM images as EC2 instances, preserving the OS and applications. AWS MGN automates lift-and-shift replication. AWS DMS requires some changes for database migration.

AWS DataSync is for data transfer. AWS App2Container requires containerization.

Practice this question →
319
MCQmedium

A company is migrating a large-scale batch processing system from on-premises to AWS. The system runs millions of short-lived jobs each day. The company wants to minimize operational overhead and cost. Which AWS compute service should the company use?

A.Amazon EC2 with Spot Fleet
B.Amazon ECS with AWS Fargate
C.AWS Lambda
D.AWS Batch
AnswerD

AWS Batch manages job scheduling, compute provisioning, and can leverage Spot Instances.

Why this answer

AWS Batch is specifically designed for batch computing workloads, handling millions of short-lived jobs efficiently by automatically provisioning compute resources and scaling based on job demand. It integrates with Spot Instances to reduce costs. Option A is wrong because EC2 with Spot Fleet requires manual management of instances and scaling, increasing operational overhead.

Option B is wrong because ECS with Fargate is optimized for containerized applications, but AWS Batch provides more specialized features for batch job scheduling and cost optimization. Option C is wrong because Lambda has a maximum execution timeout of 15 minutes and is intended for short, event-driven functions, not suitable for batch processing.

Practice this question →
320
Multi-Selecteasy

A company is migrating a batch processing workload to AWS. The workload runs on a schedule and processes large files stored on a network file system. The company wants to use serverless services. Which TWO services should the company use? (Choose TWO.)

Select 2 answers
A.Amazon EMR
B.Amazon EC2
C.Amazon S3
D.Amazon EFS
E.AWS Lambda
AnswersC, E

S3 can store large files and trigger Lambda functions.

Why this answer

Amazon S3 (Option C) is a serverless object storage service that can store the large files. AWS Lambda (Option E) is a serverless compute service that can process the files, for example by triggering on S3 events. Options A (Amazon EMR) requires a cluster of EC2 instances and is not serverless.

Option B (Amazon EC2) requires provisioning servers and is not serverless. Option D (Amazon EFS) is a managed file system that is serverless, but it does not provide compute capabilities and is not the primary serverless compute service needed for processing. Therefore, the correct answers are C and E.

Practice this question →
321
Multi-Selecthard

A company is migrating a data warehouse from on-premises to Amazon Redshift. The source database is Teradata. The company needs to convert the schema and migrate historical data with minimal downtime. Which THREE services should the company use?

Select 3 answers
A.AWS Snowball Edge
B.AWS Data Pipeline
C.Amazon Kinesis Data Analytics
D.AWS Schema Conversion Tool (SCT)
E.AWS Database Migration Service (DMS)
AnswersA, D, E

Snowball Edge can be used to transfer large volumes of data offline.

Why this answer

Options A, D, and E are correct. AWS SCT (D) converts schema and code from Teradata to Redshift. AWS DMS (E) migrates data with ongoing replication to minimize downtime.

AWS Snowball Edge (A) can be used for large initial data transfer. Option B (AWS Data Pipeline) is for orchestrating data transfers, not specifically for schema conversion or database migration. Option C (Amazon Kinesis Data Analytics) is for streaming analytics.

Practice this question →
322
MCQmedium

A company is migrating a stateful web application to AWS. The application uses local storage for user sessions. Which AWS service can help make the application stateless and scalable?

A.Amazon EBS
B.Amazon ElastiCache
C.Amazon RDS
D.Amazon S3
AnswerB

Amazon ElastiCache provides an in-memory cache (like Redis or Memcached) that can be shared across instances for session data, making the application stateless.

Why this answer

Amazon ElastiCache provides a managed in-memory cache that can store session data externally, allowing the web application to be stateless and scale horizontally. Amazon EBS volumes are attached to a single EC2 instance and cannot be shared across instances, so they do not help with statelessness. Amazon RDS is for relational databases and is not optimized for low-latency session state.

Amazon S3 is an object store with higher latency and is not suitable for frequent session reads/writes.

Practice this question →
323
MCQeasy

A company wants to assess its on-premises environment for migration to AWS. The company needs to collect utilization data for servers and applications. Which AWS service should the company use?

A.AWS Migration Hub
B.AWS Database Migration Service (DMS)
C.AWS Application Discovery Service
D.AWS Server Migration Service (SMS)
AnswerC

Discovery Service collects data about on-premises servers and applications.

Why this answer

AWS Application Discovery Service collects server and application utilization data from on-premises environments to support migration planning. Option A is wrong because AWS Migration Hub tracks migrations but does not perform discovery. Option B is wrong because AWS Database Migration Service (DMS) is for migrating databases, not for collecting utilization data.

Option D is wrong because AWS Server Migration Service (SMS) is deprecated and was used for migrating individual servers, not for discovery.

Practice this question →
324
MCQeasy

A company is migrating a legacy Windows application to AWS. The application requires a shared file system accessible from multiple EC2 instances in the same VPC. Which AWS service should the company use to meet this requirement with minimal application changes?

A.Amazon EBS
B.Amazon S3
C.Amazon FSx for Windows File Server
D.AWS Storage Gateway
AnswerC

Provides a fully managed native Windows file system that is accessible from multiple EC2 instances.

Why this answer

Mazon FSx for Windows File Server (option C). This service provides a fully managed native Windows file system that is accessible from multiple EC2 instances in the same VPC, supporting the SMB protocol required by Windows applications. Option A (Amazon EBS) is block storage that can be attached to only one instance at a time, not a shared file system.

Option B (Amazon S3) is object storage and does not provide a file system interface. Option D (AWS Storage Gateway) is used for hybrid cloud storage and is not the optimal choice for this scenario.

Practice this question →
325
MCQhard

A company is migrating a critical application to AWS using the 7 Rs migration strategy. The application has a monolithic architecture and runs on a single large on-premises server. The business wants to reduce operational overhead but cannot afford any downtime. Which strategy should the solutions architect recommend?

A.Rehost the application using AWS Application Migration Service
B.Retire the application and replace it with a SaaS solution
C.Replatform the application to use AWS managed services
D.Refactor / Re-architect the application into microservices
AnswerA

Correct: Lift-and-shift minimizes changes and downtime.

Why this answer

Rehost (lift-and-shift) moves the application as-is to minimize risk and downtime. Replatforming would require changes that could introduce downtime. Refactor/Re-architect would be too invasive.

Retire is not applicable as the application is critical.

Practice this question →
326
Multi-Selectmedium

A company is modernizing a legacy CRM application to a microservices architecture on AWS. They want to use AWS Lambda for compute and Amazon API Gateway for the API layer. Which THREE design patterns should they consider? (Select THREE.)

Select 3 answers
A.Use Amazon ElastiCache for session state management
B.Decompose the monolith into separate Lambda functions for each business capability
C.Use API Gateway to expose each microservice as a REST API
D.Use EC2 Auto Scaling groups for each microservice
E.Use AWS Step Functions to orchestrate multiple Lambda functions
AnswersB, C, E

Decomposing the monolith into separate Lambda functions for each business capability aligns with microservices principles, enabling independent development, deployment, and scaling.

Why this answer

The three design patterns for this serverless microservices architecture are: B (Decompose the monolith into separate Lambda functions for each business capability), C (Use API Gateway to expose each microservice as a REST API), and E (Use AWS Step Functions to orchestrate multiple Lambda functions). Options A and D are incorrect: A (ElastiCache) is a caching solution, not a core microservices pattern, and D (EC2 Auto Scaling) introduces server-based compute, which contradicts the serverless approach.

Practice this question →
327
MCQhard

A company is migrating a critical application from on-premises to AWS using a lift-and-shift approach. The application requires consistent low-latency access to an on-premises database. Which network solution should the company implement to meet the latency requirement during the migration?

A.Set up a site-to-site VPN over the internet.
B.Create a VPC peering connection between the on-premises network and AWS VPC.
C.Use AWS Client VPN to connect from the application servers.
D.Establish an AWS Direct Connect connection between the on-premises data center and AWS.
AnswerD

Direct Connect provides consistent low-latency and high-bandwidth connectivity.

Why this answer

D is correct because AWS Direct Connect provides dedicated, consistent low-latency connectivity from on-premises to AWS, meeting the latency requirement. A is wrong because a site-to-site VPN over the internet introduces variability and inconsistent latency due to internet routing. B is wrong because VPC peering is for connecting VPCs within AWS, not for on-premises connectivity.

C is wrong because AWS Client VPN is designed for individual client connections, not for consistent application-level latency.

Practice this question →
328
MCQmedium

A company is refactoring a legacy .NET application to run on AWS Lambda. The application currently uses Windows authentication and Active Directory. Which approach should the company use to support authentication in the new architecture?

A.Use Amazon Cognito user pools for authentication.
B.Use AWS Directory Service for Microsoft Active Directory and connect Lambda to the directory via VPC.
C.Use AWS Identity and Access Management (IAM) roles to authenticate users.
D.Use AWS Security Token Service (STS) to issue tokens for authentication.
AnswerB

This enables Kerberos/NTLM authentication within the VPC.

Why this answer

B is correct because AWS Directory Service for Microsoft Active Directory allows Lambda functions to authenticate users against an existing Active Directory. By connecting the Lambda function to the directory via a VPC, the function can perform Windows authentication for the refactored .NET application. Option A is incorrect because Amazon Cognito user pools are designed for external identity providers, not for Windows AD authentication.

Option C is incorrect because IAM roles are used for granting AWS service permissions, not for authenticating users with Windows credentials. Option D is incorrect because STS issues temporary tokens for AWS API access, not for Windows authentication.

Practice this question →
329
MCQeasy

A company is planning to migrate a web application to AWS. The application currently runs on a single on-premises server with a few thousand users. The company wants to use a managed container service and minimize operational overhead. Which AWS service should the company use to run the application?

A.Amazon EKS
B.AWS Lambda
C.Amazon EC2
D.Amazon ECS with AWS Fargate
AnswerD

Fargate is serverless, reduces operational overhead.

Why this answer

Amazon ECS with AWS Fargate is a managed container service that eliminates the need to manage underlying EC2 instances, reducing operational overhead. Option A (Amazon EKS) is wrong because it is Kubernetes-based and more complex to manage, which does not align with minimizing operational overhead. Option B (AWS Lambda) is wrong because it is designed for short-running functions, not for running a web application as a container.

Option C (Amazon EC2) is wrong because it requires manual management of instances and containers, increasing operational overhead.

Practice this question →
330
MCQhard

A company is migrating a 10 TB Oracle database to Amazon Aurora PostgreSQL. The database is business-critical and must have minimal downtime. The company has set up AWS DMS with ongoing replication from the source. During the migration, the company notices that DMS is failing with an error indicating insufficient memory. What should the company do to resolve this issue and complete the migration?

A.Increase the memory on the source Oracle database
B.Increase the instance class of the DMS replication instance
C.Change the DMS task to use change data capture (CDC) only and skip the full load
D.Split the migration into multiple smaller tasks
AnswerB

DMS replication instance memory is insufficient; upgrading the instance class resolves the issue.

Why this answer

AWS DMS replication instances have finite memory allocated to cache changes during ongoing replication (CDC). When the volume of cached changes exceeds the instance's memory, DMS fails with an insufficient memory error. Increasing the instance class of the DMS replication instance (Option B) provides more memory to handle the cache, resolving the error without disrupting the migration.

Exam trap

The trap here is that candidates may think the error is on the source database (Option A) or that splitting tasks (Option D) solves memory issues, but DMS's memory error is specific to the replication instance's capacity, not the source or task granularity.

How to eliminate wrong answers

Option A is wrong because the source Oracle database's memory is unrelated to DMS's internal caching; DMS runs on its own replication instance, not on the source. Option C is wrong because skipping the full load would leave the target database empty, defeating the purpose of migration; CDC alone cannot populate the initial schema and data. Option D is wrong because splitting into multiple tasks does not increase the memory available to any single task; each task still runs on the same replication instance and would encounter the same memory limit.

Practice this question →
331
MCQmedium

Refer to the exhibit. A company has attached this IAM policy to an IAM role used by an application running on an EC2 instance in a VPC with CIDR 10.0.0.0/16. The application is unable to read objects from the S3 bucket. What is the most likely cause?

A.The EC2 instance does not have an IAM instance profile.
B.The policy does not allow the s3:ListBucket action.
C.The condition key aws:SourceIp uses the private IP of the instance, but S3 sees the public IP.
D.The S3 bucket policy denies access.
AnswerC

The condition fails because traffic to S3 originates from the public IP.

Why this answer

The IAM policy uses the `aws:SourceIp` condition key with the private IP address of the EC2 instance (10.0.0.x). However, when the instance accesses S3, the request originates from the instance's public IP address (or the NAT gateway's public IP). Since the `aws:SourceIp` condition checks the source IP of the request, and it expects the private IP, the condition fails and denies access to the S3 bucket.

Therefore, the most likely cause is that the condition key uses the private IP but S3 sees the public IP (option C). Option A is incorrect because the instance has an IAM role attached (implied by the policy being attached to the role). Option B is incorrect because the `s3:GetObject` action is allowed, and `s3:ListBucket` is not required to read objects if the bucket policy allows it.

Option D is incorrect because the bucket policy is not mentioned and the issue lies with the IAM policy condition.

Practice this question →
← PreviousPage 5 of 5 · 331 questions total

Ready to test yourself?

Try a timed practice session using only Accelerate Workload Migration and Modernization questions.

Start 20-question session