Courseiva

CCNA Migration Modernization Questions

75 of 331 questions · Page 2/5 · Migration Modernization topic · Answers revealed

Practice these questionsExam hubAll questions
76
MCQhard

A company is migrating a stateful firewall appliance to AWS. The appliance currently inspects traffic between multiple on-premises segments. In AWS, the company wants to deploy the appliance in a VPC to inspect traffic between subnets. Which architecture should the company use to ensure that the appliance can inspect all traffic?

A.Deploy the appliance behind an Application Load Balancer and configure the VPC route tables.
B.Deploy the appliance behind a Gateway Load Balancer in an inspection VPC and use a Transit Gateway to route traffic through it.
C.Deploy the appliance behind a Network Load Balancer and configure the VPC route tables to send traffic to the NLB.
D.Use VPC Gateway Endpoints to route traffic through the appliance.
AnswerB

GWLB is designed for transparent inspection of network traffic.

Why this answer

A Gateway Load Balancer (GWLB) can be deployed in an inspection VPC and used with a Transit Gateway to route traffic from subnets through the appliance for inspection. Option A is wrong because an Application Load Balancer cannot inspect traffic and is designed for HTTP/HTTPS. Option C is wrong because a Network Load Balancer does not inspect traffic; it forwards traffic without inspection.

Option D is wrong because VPC Gateway Endpoints are used to access AWS services privately, not for traffic inspection.

Practice this question →
77
MCQeasy

A company wants to migrate its on-premises virtualized workloads to AWS using the VMware Cloud on AWS service. The company currently uses VMware vSphere for virtualization. What is the primary benefit of using VMware Cloud on AWS for this migration?

A.It allows the company to continue using existing VMware management tools and processes
B.It provides better application performance compared to running on AWS native compute
C.It reduces the total cost of ownership by eliminating the need for any hardware maintenance
D.It eliminates the need to refactor applications for the cloud
AnswerA

Correct. VMware Cloud on AWS provides a consistent VMware environment.

Why this answer

VMware Cloud on AWS allows organizations to use the same VMware tools and processes, minimizing the learning curve and operational changes. It does not automatically reduce costs, nor does it provide better performance or eliminate the need to refactor applications.

Practice this question →
78
Multi-Selectmedium

A company is migrating a web application to AWS and wants to use a multi-tier architecture with an Auto Scaling group of EC2 instances behind an Application Load Balancer. The company needs to store session state for the application. Which TWO approaches should the company use to store session state in a scalable and highly available manner? (Choose TWO.)

Select 2 answers
A.Use Amazon DynamoDB with on-demand capacity.
B.Use an EC2 instance store for each instance.
C.Use Amazon EBS snapshots shared across instances.
D.Use Amazon ElastiCache for Redis with replication.
E.Use Amazon RDS for MySQL with Multi-AZ.
AnswersA, D

DynamoDB is a fully managed NoSQL database with high availability.

Why this answer

Options A and D are correct because ElastiCache for Redis and DynamoDB are both highly available and scalable solutions for session state. Option B is wrong because instance store is ephemeral and data is lost if the instance stops or terminates. Option C is wrong because EBS snapshots are point-in-time backups and cannot be used for real-time session state sharing.

Option E is wrong because RDS is a relational database not optimized for session state storage.

Practice this question →
79
Multi-Selectmedium

A company is migrating a legacy application to AWS. The application currently runs on a single on-premises server with a local MySQL database. The company wants to minimize changes and reduce operational overhead. Which TWO strategies should the solutions architect recommend? (Select TWO.)

Select 2 answers
A.Refactor the application to use microservices
B.Retire the application
C.Replatform the database to Amazon RDS for MySQL
D.Rehost the application on Amazon EC2
E.Repurchase a SaaS alternative
AnswersC, D

Correct: Reduces operational overhead with managed database.

Why this answer

Rehost (lift-and-shift) minimizes changes by moving the application as-is. Replatforming the database to RDS reduces operational overhead by offloading database management. Retire is not applicable.

Refactor would require changes. Repurchase involves buying new software.

Practice this question →
80
MCQeasy

A company is migrating a legacy application to AWS. The application uses a proprietary binary protocol that is not HTTP-based. The application currently runs on a single server and communicates with clients over TCP port 4444. The company wants to use AWS Elastic Load Balancing to distribute traffic across multiple EC2 instances for high availability. Which load balancer type should the company use?

A.AWS Global Accelerator
B.Classic Load Balancer (CLB)
C.Network Load Balancer (NLB)
D.Application Load Balancer (ALB)
AnswerC

NLB supports TCP at Layer 4 and can handle proprietary protocols.

Why this answer

Network Load Balancer (NLB) operates at the transport layer (Layer 4) and supports TCP traffic, including proprietary protocols over port 4444. Option A is incorrect because AWS Global Accelerator uses anycast IP to improve performance but does not function as a regional load balancer; it is typically used with ALB or NLB. Option B is incorrect because Classic Load Balancer (CLB) is a legacy option that supports TCP but lacks advanced features and is not recommended for new applications.

Option D is incorrect because Application Load Balancer (ALB) only supports HTTP/HTTPS and cannot handle non-HTTP traffic.

Practice this question →
81
MCQmedium

Refer to the exhibit. A company has this IAM policy attached to a group. A user in the group tries to terminate an EC2 instance in us-east-1 with the tag 'Environment: staging'. What happens?

A.The instance is terminated because the policy allows TerminateInstances.
B.The termination is denied because the condition requires the 'Environment' tag to be 'production'.
C.The termination is denied because the Resource is not the instance's ARN.
D.The instance is terminated because the condition is not evaluated.
AnswerB

The condition StringEquals requires the tag value to be 'production'.

Why this answer

The TerminateInstances action has a condition that requires the tag 'Environment: production'. Since the instance has 'staging', the condition is not met, so the action is denied. Options A, B, and D are incorrect because the condition explicitly requires 'production'.

Practice this question →
82
Multi-Selectmedium

A company is migrating a large number of on-premises virtual machines (VMs) to AWS using AWS Application Migration Service (AWS MGN). During the initial replication, some VMs fail with the error 'Replication agent cannot communicate with the AWS MGN endpoint'. Which TWO actions should the company take to resolve this issue? (Choose TWO.)

Select 2 answers
A.Reinstall the AWS Replication Agent on the source servers
B.Configure AWS PrivateLink VPC endpoints for AWS MGN in the target VPC
C.Ensure that the security group of the replication servers allows inbound traffic from the source servers
D.Verify that the source servers have outbound internet access to the AWS MGN endpoint
E.Increase the instance type of the source servers to provide more CPU and memory
AnswersB, D

VPC endpoints allow private connectivity without internet access.

Why this answer

The correct actions are B and D. AWS Application Migration Service (MGN) requires the replication agent to communicate with the AWS MGN endpoint. If the source servers do not have outbound internet access (option D), you can configure AWS PrivateLink VPC endpoints for AWS MGN (option B) to establish connectivity without internet access.

Option A (reinstalling the agent) is not a first troubleshooting step for connectivity issues. Option C (security group inbound rules) is about inbound traffic, but the agent initiates outbound connections. Option E (increasing CPU/memory) does not resolve communication failures.

Practice this question →
83
Multi-Selectmedium

A company is migrating a three-tier web application to AWS and wants to decouple the layers for scalability. Which THREE AWS services should they use?

Select 3 answers
A.Application Load Balancer (ALB)
B.Amazon Simple Queue Service (SQS)
C.Amazon RDS
D.Amazon CloudFront
E.Amazon ElastiCache
AnswersA, B, C

Routes traffic to web servers.

Why this answer

Options A, B, and C are correct. ALB for web tier, SQS for decoupling, and RDS for database. Option D (CloudFront) is a CDN, not for decoupling.

Option E (ElastiCache) is optional caching.

Practice this question →
84
MCQeasy

A company is migrating a large Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downtime and support ongoing replication. Which AWS service should the company use?

A.AWS Application Discovery Service
B.AWS Server Migration Service
C.AWS Database Migration Service
D.AWS Schema Conversion Tool
AnswerC

DMS supports ongoing replication for minimal downtime.

Why this answer

AWS Database Migration Service (DMS), is the correct answer because it is specifically designed for migrating databases to AWS with minimal downtime, and it supports ongoing replication from Oracle to Aurora PostgreSQL using change data capture (CDC). Option A is incorrect because AWS Application Discovery Service is used for discovering on-premises servers and applications, not for database migration. Option B is incorrect because AWS Server Migration Service (now part of SMS) is for migrating virtual machines, not databases.

Option D is incorrect because AWS Schema Conversion Tool (SCT) is used to convert the database schema from one engine to another, not for ongoing replication; it is often used alongside DMS.

Practice this question →
85
Multi-Selectmedium

A company is migrating a web application to AWS. The application currently runs on a single server and uses a MySQL database. The company wants to ensure high availability and scalability. The web application is stateless. Which TWO actions should the company take to achieve these goals? (Choose TWO.)

Select 2 answers
A.Deploy the web application on Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones, with an Application Load Balancer
B.Use a single Amazon RDS for MySQL DB instance
C.Use Multi-AZ Amazon RDS for MySQL
D.Use Amazon ElastiCache to cache database queries
E.Use a large EC2 instance for the web application with Elastic IP
AnswersA, C

Auto Scaling and ALB across AZs provide scalability and high availability.

Why this answer

To achieve high availability and scalability for the web application, the company should deploy the web tier across multiple Availability Zones using an Auto Scaling group with an Application Load Balancer (Option A), which distributes traffic and automatically scales instances. For the MySQL database, using Multi-AZ Amazon RDS (Option C) provides automatic failover and high availability. Option B (single RDS instance) is a single point of failure.

Option D (ElastiCache) is for caching, not for high availability or scaling. Option E (large EC2 instance with Elastic IP) does not provide scalability or availability.

Practice this question →
86
MCQhard

A company is migrating a stateful application to AWS and needs to preserve the client IP addresses at the application layer. The application runs on EC2 instances behind a load balancer. Which load balancer type should they use?

A.Network Load Balancer (NLB)
B.Application Load Balancer (ALB)
C.Classic Load Balancer (CLB)
D.Gateway Load Balancer (GWLB)
AnswerA

Preserves the source IP address of the client.

Why this answer

(Network Load Balancer) is correct because it preserves the client IP address by default. Option B (ALB) uses proxy protocol, but the application must be configured to parse it. Option C (Classic Load Balancer) does not preserve IP.

Option D (Gateway Load Balancer) is for third-party appliances.

Practice this question →
87
MCQmedium

A company is migrating a legacy application that uses Windows Authentication for SQL Server. The company wants to use AWS Managed Microsoft AD. Which migration strategy should be used for the database to maintain compatibility?

A.Use AWS DMS to migrate to Amazon DynamoDB
B.Replatform to Amazon RDS for MySQL
C.Replatform to Amazon RDS for SQL Server with Windows Authentication
D.Replatform to Amazon Aurora PostgreSQL
AnswerC

RDS for SQL Server supports Windows Authentication integrated with AWS Managed Microsoft AD.

Why this answer

(Replatform to Amazon RDS for SQL Server with Windows Authentication) is correct because RDS for SQL Server supports Windows Authentication via AWS Managed Microsoft AD. Option A (Amazon DynamoDB) is incorrect because DynamoDB is a NoSQL database and does not support Windows Authentication. Option B (Amazon RDS for MySQL) is incorrect because MySQL does not support Windows Authentication.

Option D (Amazon Aurora PostgreSQL) is incorrect because PostgreSQL does not support Windows Authentication.

Practice this question →
88
MCQhard

A company is migrating a large-scale Oracle data warehouse to Amazon Redshift. The migration must minimize downtime. The source database is 10 TB and runs on a single on-premises server with 1 Gbps network. Which approach should be used for the initial data load?

A.Use AWS DMS to migrate data directly to Redshift over the network.
B.Use AWS Snowball Edge to transfer data to S3, then copy to Redshift.
C.Use AWS DMS with ongoing replication after initial load via network.
D.Use S3 Transfer Acceleration to upload data to S3, then COPY to Redshift.
AnswerB

Offline transfer bypasses bandwidth constraints.

Why this answer

Using AWS Snowball Edge devices for offline transfer avoids network bandwidth limitations and provides fast, secure transfer of large data volumes. Option A is wrong because 1 Gbps network would take over 22 hours and may cause congestion. Option B is wrong because DMS works for ongoing replication but initial load over network is slow.

Option D is wrong because S3 Transfer Acceleration only speeds up S3 uploads, not the full pipeline.

Practice this question →
89
Multi-Selecthard

A company is modernizing a monolithic Java application to run on Amazon ECS with Fargate. The application uses a proprietary configuration management system. Which TWO AWS services can replace the configuration management system to store and retrieve configuration at runtime?

Select 2 answers
A.Amazon S3 with versioning enabled.
B.AWS Secrets Manager.
C.Amazon DynamoDB with application-side caching.
D.AWS AppConfig, a feature of AWS Systems Manager.
E.AWS Systems Manager Parameter Store.
AnswersD, E

AppConfig is designed for application configuration management.

Why this answer

(AWS AppConfig, a feature of AWS Systems Manager) and Option E (AWS Systems Manager Parameter Store) are both purpose-built services for storing and retrieving configuration at runtime. AppConfig provides validation, deployment strategies, and rollback capabilities, making it ideal for managing application configuration in a controlled manner. Parameter Store offers secure, hierarchical storage for configuration data and integrates seamlessly with AWS services.

Option A (S3) is general object storage, not optimized for runtime configuration retrieval with validation. Option B (Secrets Manager) is designed for managing secrets, not general configuration. Option C (DynamoDB) is a NoSQL database; while it can store configuration, it lacks the deployment controls and native integration of AppConfig and Parameter Store.

Practice this question →
90
MCQeasy

A company is migrating its on-premises virtual machines (VMs) to AWS. The company has 50 VMs running various operating systems and applications. The architect wants to use a service that automates the replication and conversion of the VMs to Amazon EC2 instances. Which AWS service should the architect use?

A.AWS Application Migration Service (AWS MGN)
B.AWS DataSync
C.AWS Server Migration Service (AWS SMS)
D.AWS CloudEndure Migration
AnswerA

AWS MGN automates replication and conversion of VMs to EC2.

Why this answer

AWS Application Migration Service (AWS MGN) automatically replicates and converts VMs to EC2. AWS Server Migration Service (SMS) is an older service, but MGN is the recommended service for automated migration. AWS CloudEndure Migration has been rebranded as AWS Application Migration Service.

AWS DataSync is for file transfers.

Practice this question →
91
MCQeasy

A company is planning to migrate 50 TB of data from an on-premises data center to Amazon S3. The on-premises network bandwidth is 100 Mbps. The migration must be completed within 30 days. What is the most cost-effective solution?

A.Use AWS Direct Connect to increase bandwidth.
B.Use AWS Snowball Edge device.
C.Use AWS DataSync over the internet.
D.Use AWS Database Migration Service (AWS DMS).
AnswerB

Snowball Edge can transfer 50 TB in a few days, meeting the deadline cost-effectively.

Why this answer

At 100 Mbps, transferring 50 TB over the internet would take approximately 50 days (50*8*1024*1024 / (100*86400) ≈ 48.5 days), exceeding the 30-day window. AWS Snowball Edge is a physical device that can transfer data offline faster and is cost-effective for large data volumes. AWS DMS is for databases; Direct Connect requires setup time; S3 Transfer Acceleration improves speed but still limited by bandwidth.

Practice this question →
92
Multi-Selecthard

A company is performing a server migration to AWS using AWS Server Migration Service (SMS). The company needs to automate the replication of servers and track the migration status. Which THREE components are required for this solution? (Choose three.)

Select 3 answers
A.AWS SMS connector installed on the on-premises hypervisor
B.AWS Schema Conversion Tool
C.AWS Migration Hub
D.AWS Database Migration Service
E.AWS CloudFormation
AnswersA, C, E

Facilitates replication to AWS.

Why this answer

Options A, C, and E are correct. AWS SMS connector is installed on-premises to enable server replication. AWS Migration Hub provides a central location to track the migration status of servers.

AWS CloudFormation can be used to automate the deployment of resources and manage the migration pipeline. Option B (AWS Schema Conversion Tool) is for schema conversion of databases, not server migration. Option D (AWS Database Migration Service) is specifically for database migrations, not server replication.

Practice this question →
93
MCQmedium

A company is migrating a legacy on-premises .NET application to AWS. The application uses a SQL Server database and requires full control over the operating system for compliance. Which migration strategy should the solutions architect recommend to minimize rework while meeting compliance requirements?

A.Rehost the application on EC2 instances and use RDS Custom for SQL Server.
B.Replace the database with Amazon DynamoDB and refactor the application.
C.Replatform the application to use RDS for SQL Server and deploy the application on EC2 instances.
D.Refactor the application to run on Amazon ECS using Docker containers.
AnswerA

Minimal changes, OS-level control via RDS Custom meets compliance.

Why this answer

Rehosting (lift-and-shift) with EC2 and RDS Custom for SQL Server allows the company to move the application and database with minimal changes while retaining OS-level control for compliance. RDS Custom provides OS access (SSH, patching) unlike standard RDS, meeting the compliance requirement. Option B (DynamoDB) would require significant application refactoring.

Option C (RDS for SQL Server without Custom) lacks OS access. Option D (ECS with containers) adds containerization rework and does not inherently provide OS-level control.

Practice this question →
94
MCQhard

A company is migrating a legacy .NET application to AWS. The application uses Windows authentication and integrates with on-premises Active Directory. The company wants to use AWS Managed Microsoft AD to reduce administrative overhead. However, after migration, the application fails to authenticate users. What is the most likely cause?

A.The security group for the application servers does not allow inbound traffic on port 389.
B.AWS Managed Microsoft AD does not support LDAP queries.
C.The application is not configured to use the correct DNS servers for the AWS Managed Microsoft AD domain.
D.The application is using NTLM authentication, which is not supported by AWS Managed Microsoft AD without a trust relationship.
AnswerD

NTLM requires a trust, and without it, authentication fails.

Why this answer

The application likely uses NTLM or Kerberos authentication, which requires proper trust relationships between the AWS Managed Microsoft AD and the on-premises AD. Option A is wrong because security groups do not affect authentication protocols. Option B is wrong because AWS Managed Microsoft AD supports LDAP.

Option C is wrong because DNS resolution is not the root cause.

Practice this question →
95
MCQmedium

A company is migrating data to Amazon S3 and requires that all objects uploaded to the bucket 'my-bucket' are encrypted with SSE-S3. The above IAM policy is attached to an IAM user. An application using the user's credentials attempts to upload an object without specifying the x-amz-server-side-encryption header. What will happen?

A.The upload succeeds because the Allow statement grants permission.
B.The upload fails because the bucket policy overrides the IAM policy.
C.The upload fails because the Deny statement denies the request when encryption is not AES256.
D.The upload succeeds because the object is encrypted with the default SSE-S3.
AnswerC

The Deny statement explicitly denies PutObject if encryption is not AES256, and without the header, it is considered not AES256.

Why this answer

The IAM policy includes a Deny statement that denies the upload if the x-amz-server-side-encryption header is not set to AES256. Since the application does not include this header, the Deny condition is triggered and the upload fails. Option A is incorrect because the Deny statement overrides the Allow statement when the condition is met.

Option B is incorrect because the scenario only involves an IAM policy, not a bucket policy. Option D is incorrect because the absence of the encryption header means the Deny statement applies, so the upload does not proceed even though SSE-S3 is the default.

Practice this question →
96
MCQhard

A company is migrating a large-scale batch processing workload from on-premises to AWS. The workload runs on a schedule and processes data files from an FTP server. The company wants to use AWS services that are serverless and event-driven to reduce operational overhead. The data files will be uploaded to an Amazon S3 bucket. Which solution meets these requirements?

A.Use Amazon S3 Event Notifications to invoke an AWS Batch job that processes the file
B.Use Amazon S3 Event Notifications to invoke an AWS Lambda function that processes the file
C.Use AWS Glue to crawl the S3 bucket and run an ETL job on a schedule
D.Use Amazon S3 Event Notifications to start an AWS Step Functions workflow that runs processing on Amazon EC2
AnswerB

Lambda is serverless, event-driven, and processes the file upon upload, reducing overhead.

Why this answer

Amazon S3 Event Notifications can directly invoke an AWS Lambda function to process the file upon upload. This is serverless and event-driven, meeting the requirements to reduce operational overhead. Option A (AWS Batch) is not serverless because it requires provisioning compute resources and does not directly trigger from S3 events in a serverless manner.

Option C (AWS Glue) is designed for ETL and crawling, not for general batch processing of files. Option D (Step Functions) is used for orchestrating workflows, but the actual processing would still need a compute resource like EC2 or Lambda; using it with EC2 adds overhead and is not fully serverless.

Practice this question →
97
Multi-Selecthard

A company is migrating a batch processing workload to AWS. The workload runs nightly and takes approximately 2 hours on a single on-premises server. The company wants to reduce the processing time to under 30 minutes. Which THREE steps should the solutions architect recommend?

Select 3 answers
A.Split the workload into smaller batches and run them in parallel on multiple EC2 instances.
B.Use a larger, compute-optimized EC2 instance type.
C.Use EBS io2 volumes with high IOPS for the instance.
D.Use EC2 Spot Instances to reduce cost.
E.Use AWS Batch with multiple compute environments to orchestrate parallel processing.
AnswersA, B, E

Parallel processing reduces overall time significantly.

Why this answer

Using a larger instance (compute optimized) can speed up processing. Parallel processing by splitting the workload across multiple EC2 instances reduces time. Using a distributed processing framework like AWS Batch with multiple compute environments enables parallel execution.

EBS io2 volumes improve I/O but may not reduce time by 75%. Spot Instances can reduce cost but not processing time directly.

Practice this question →
98
MCQhard

A company is migrating a critical application to AWS. The migration plan includes a pilot light strategy. The company has set up a small replica of the environment in AWS. During a disaster, the company wants to quickly provision the full production environment. Which AWS service is best suited for this purpose?

A.AWS OpsWorks
B.AWS Elastic Beanstalk
C.AWS CloudFormation
D.AWS CodeDeploy
AnswerC

CloudFormation templates can quickly launch the full environment.

Why this answer

AWS CloudFormation is the best service for this scenario because it allows you to define the entire infrastructure as code in templates, which can be stored and then quickly executed to provision the full production environment during a disaster. This aligns with the pilot light strategy, where a small replica is already running and CloudFormation can rapidly scale it up. Option A (OpsWorks) is wrong because it is configuration management service for Chef/Puppet, not for quickly provisioning full environments.

Option B (Elastic Beanstalk) is wrong because it is designed for deploying web applications, not for provisioning custom infrastructure. Option D (CodeDeploy) is wrong because it handles application deployments, not infrastructure provisioning.

Practice this question →
99
MCQhard

A retail company is migrating its on-premises e-commerce platform to AWS. The platform consists of a load-balanced web tier, an application tier, and a MySQL database. The company wants to modernize the database by migrating to Amazon Aurora MySQL. The migration must have minimal downtime and support rollback. The database is 2 TB in size and has high write activity. The company has set up an AWS Direct Connect connection. Which approach should the company take to migrate the database with minimal downtime?

A.Use AWS SCT to convert the schema, then use AWS DMS with a full load task to migrate the data.
B.Use AWS SCT to convert the schema, then use AWS DMS with a full load and ongoing replication (CDC) task to keep the target in sync until cutover.
C.Use mysqldump to export the database, transfer the dump via AWS Direct Connect, and import into Aurora MySQL.
D.Use the AWS Schema Conversion Tool (SCT) to convert the schema, then set up an Aurora Replica from the on-premises source using native MySQL replication.
AnswerB

Full load plus CDC provides continuous replication, minimizing downtime. Cutover is quick and rollback is possible by stopping replication.

Why this answer

AWS DMS with a full load and ongoing change data capture (CDC) task enables continuous replication of high-write activity from the on-premises MySQL database to Amazon Aurora MySQL, minimizing downtime by keeping the target synchronized until cutover. The CDC component captures incremental changes after the full load, allowing a near-zero downtime migration with the ability to roll back by stopping replication and reverting to the source.

Exam trap

The trap here is that candidates may assume native MySQL replication (Option D) is the simplest approach, but AWS DMS is the recommended managed service for heterogeneous or homogeneous migrations with minimal downtime, as it handles schema conversion, ongoing replication, and rollback seamlessly.

How to eliminate wrong answers

Option A is wrong because a full load task only migrates the data at a point in time, failing to capture ongoing writes during the migration, which would cause significant downtime and data loss. Option C is wrong because mysqldump is a logical export tool that requires taking the source database offline or locking tables to ensure consistency, resulting in downtime, and it does not support ongoing replication for high-write environments. Option D is wrong because Aurora Replicas are read replicas within Amazon Aurora, not a feature for replicating from an on-premises MySQL source; native MySQL replication to Aurora is possible but requires manual setup and does not provide the managed CDC and rollback capabilities of AWS DMS.

Practice this question →
100
MCQhard

A company is migrating a web application to AWS. The application runs on EC2 instances behind an Application Load Balancer. The exhibit shows the current running instances. The company wants to ensure high availability across multiple Availability Zones. Which action should the company take?

A.Launch additional m5.large instances in us-east-1a.
B.Change the m5.xlarge instance in us-east-1c to an m5.large in us-east-1c or move it to another AZ.
C.Terminate the m5.xlarge instance in us-east-1c and launch an m5.large in the same AZ.
D.Place all instances in a single AZ and use an Auto Scaling group.
AnswerB

Balancing instance types and ensuring even distribution across AZs improves HA.

Why this answer

The current instance distribution shows an m5.large in us-east-1b (or similar) and an m5.xlarge in us-east-1c, which is inconsistent. To ensure high availability across multiple Availability Zones, the company should either change the m5.xlarge to an m5.large to match instance types, or move it to a different AZ to better distribute instances. This avoids a single point of failure and ensures balanced capacity.

Option A is incorrect because adding more instances to us-east-1a does not improve AZ diversity. Option C is incorrect because terminating the m5.xlarge and launching an m5.large in the same AZ does not change the AZ distribution. Option D is incorrect because placing all instances in a single AZ eliminates high availability.

Practice this question →
101
MCQmedium

A company is migrating a legacy .NET application to AWS. The application uses Windows authentication and stores session state in-memory. The company wants to minimize code changes and use AWS managed services. Which combination of AWS services should the company use to modernize the application's authentication and session management?

A.AWS Directory Service for Microsoft Active Directory (AD Connector) and Amazon RDS
B.Amazon Cognito and Amazon DynamoDB
C.AWS IAM and Amazon DynamoDB
D.AWS Managed Microsoft AD and Amazon ElastiCache for Redis
AnswerD

Managed Microsoft AD provides native Windows authentication; ElastiCache for Redis supports session management with minimal code changes.

Why this answer

AWS Managed Microsoft AD allows the application to continue using Windows authentication with minimal code changes, and Amazon ElastiCache for Redis provides a distributed, high-performance session store that can replace in-memory session state. Option A is incorrect because AD Connector only proxies authentication requests to an on-premises Active Directory, not providing a managed AD service, and Amazon RDS is not designed for session storage. Option B is incorrect because Amazon Cognito is intended for external identity federation (e.g., social logins), not Windows authentication.

Option C is incorrect because AWS IAM is for managing access to AWS resources, not for application-level Windows authentication.

Practice this question →
102
MCQmedium

A company is migrating a large .NET application from Windows Server on-premises to AWS. The application uses a SQL Server database. The company wants to reduce licensing costs by using open-source alternatives where possible. However, the application code heavily uses SQL Server-specific features like CLR integration, linked servers, and T-SQL stored procedures. What is the most cost-effective migration strategy?

A.Rehost both application and database on Amazon EC2 with SQL Server licenses brought to AWS
B.Refactor the application to use a microservices architecture with separate databases
C.Rehost the application on Amazon EC2 Windows Server and use Amazon RDS for SQL Server with a license-included option
D.Replatform the database to Amazon Aurora PostgreSQL and rewrite the database code to be compatible
AnswerC

Correct. This reduces operational costs and retains SQL Server features.

Why this answer

Replatforming the database to Amazon RDS for SQL Server retains the SQL Server-specific features while reducing operational overhead. Moving to Aurora PostgreSQL or MySQL would require significant code changes. Rehosting on EC2 SQL Server does not reduce licensing costs.

Practice this question →
103
MCQmedium

A company is migrating a monolithic .NET application to AWS. The application uses a SQL Server database with complex stored procedures and tightly coupled components. The migration team wants to minimize refactoring and reduce licensing costs. Which migration strategy should the team use?

A.Refactor the application to .NET Core and use Amazon RDS for MySQL to eliminate Windows licensing.
B.Rehost the application on Amazon EC2 and the database on EC2 with SQL Server using Bring Your Own License (BYOL).
C.Rearchitect the application to microservices and use Amazon DynamoDB for the database.
D.Replatform the database to Amazon Aurora with PostgreSQL compatibility to reduce licensing costs.
AnswerB

This minimizes changes and leverages existing licenses.

Why this answer

Rehosting (lift-and-shift) the monolithic .NET application on Amazon EC2 and the SQL Server database on EC2 with BYOL minimizes refactoring effort and reduces licensing costs by leveraging existing SQL Server licenses. This strategy avoids the complexity of rewriting stored procedures or decoupling tightly coupled components, which is critical for a migration focused on speed and cost reduction.

Exam trap

The trap here is that candidates often choose replatforming (Option D) thinking it reduces licensing costs, but they overlook the need to refactor SQL Server-specific stored procedures for PostgreSQL compatibility, which violates the 'minimize refactoring' requirement.

How to eliminate wrong answers

Option A is wrong because refactoring to .NET Core and switching to Amazon RDS for MySQL would require significant code changes, including rewriting complex stored procedures incompatible with MySQL, and does not minimize refactoring as stated in the question. Option C is wrong because rearchitecting to microservices and using DynamoDB would require extensive refactoring of the monolithic application and stored procedures, contradicting the goal to minimize refactoring. Option D is wrong because replatforming the database to Amazon Aurora with PostgreSQL compatibility would still require modifying the SQL Server stored procedures and potentially the application code, increasing refactoring effort and not reducing licensing costs as effectively as BYOL.

Practice this question →
104
MCQmedium

A company is migrating a containerized application to Amazon ECS. The application requires persistent storage that can be shared across multiple containers running on different EC2 instances. Which storage solution should they use?

A.Amazon FSx for Lustre
B.Amazon EBS
C.Amazon EFS
D.Amazon S3
AnswerC

EFS provides a shared file system for multiple instances.

Why this answer

Amazon EFS provides a shared file system that can be accessed by multiple EC2 instances concurrently, making it ideal for persistent storage shared across containers in Amazon ECS. Option A (Amazon FSx for Lustre) is designed for high-performance computing workloads and is not intended for general shared container storage. Option B (Amazon EBS) volumes are block-level storage that can only be attached to a single EC2 instance at a time, so they cannot be shared across multiple instances.

Option D (Amazon S3) is object storage, not a file system, and does not provide a standard file system interface that containers require.

Practice this question →
105
Multi-Selecthard

Which THREE of the following are common challenges when migrating a monolithic application to a microservices architecture on AWS? (Choose three.)

Select 3 answers
A.Managing distributed transactions across multiple services
B.Single database bottleneck when all services share the same database
C.Increased network latency due to inter-service communication
D.Ensuring data consistency between services that own their own databases
E.Difficulty in scaling individual services independently
AnswersA, C, D

Distributed transactions require patterns like saga.

Why this answer

Distributed transactions, data consistency, and network latency are well-known challenges. Autoscaling is a benefit. Single database bottleneck can be solved with polyglot persistence.

Practice this question →
106
MCQhard

A company is migrating a critical database server to Amazon EC2. The root volume (EBS) is configured with DeleteOnTermination=false. After migration, the company needs to ensure that if the EC2 instance fails, a new instance can be quickly launched using the same data. The company takes regular snapshots of the volume. Which statement is correct regarding the root volume's behavior?

A.The root volume cannot be used as a boot volume for a new instance.
B.The root volume will be automatically deleted when the instance is terminated.
C.The root volume will persist after instance termination and can be attached to another instance.
D.Snapshots of the volume will be automatically deleted when the instance is terminated.
AnswerC

The volume remains and can be attached to a new instance for recovery.

Why this answer

When DeleteOnTermination is set to false, the root volume persists after the EC2 instance is terminated. This allows the volume to be attached to another instance, enabling quick recovery. Option A is incorrect because the root volume can be used as a boot volume for a new instance when attached.

Option B is incorrect because the volume is not automatically deleted; deletion only occurs when DeleteOnTermination is true. Option D is incorrect because snapshots are independent of the DeleteOnTermination setting and are not automatically deleted upon instance termination.

Practice this question →
107
MCQmedium

An IAM policy allows a user to start and stop EC2 instances but denies terminating instances under a specific condition. Which action will the policy deny?

A.Terminating an EC2 instance in the eu-west-1 region
B.Starting an EC2 instance in the us-west-2 region
C.Stopping an EC2 instance in the eu-west-1 region
D.Terminating an EC2 instance in the us-east-1 region
AnswerA

The Deny statement denies terminating when the region is not us-east-1, so terminating in eu-west-1 is denied.

Why this answer

The Deny statement applies when the condition "StringNotEquals" is true, meaning the requested region is NOT us-east-1. So terminating an instance in a region other than us-east-1 is denied. Terminating in us-east-1 is allowed (since the condition is not met).

Starting and stopping are allowed by the first statement.

Practice this question →
108
MCQmedium

A company is migrating a containerized application from on-premises to AWS. The application runs on Kubernetes. The company wants to use Amazon EKS for orchestration. The migration must support high availability across multiple Availability Zones and integrate with AWS services like IAM, VPC, and CloudWatch. The company needs to minimize the operational overhead of managing the Kubernetes control plane. Which EKS configuration should the company use?

A.Use EKS with managed node groups using a mix of On-Demand and Spot Instances across three Availability Zones.
B.Use EKS with self-managed node groups using On-Demand instances in two Availability Zones.
C.Use EKS with a single managed node group using a single instance type in one Availability Zone.
D.Use EKS with Fargate launch type for all pods.
AnswerA

Managed node groups reduce overhead; multi-AZ and mixed instances provide HA and cost savings.

Why this answer

Using EKS with managed node groups reduces operational overhead as AWS manages the node provisioning, scaling, and patching. Deploying across three Availability Zones with a mix of On-Demand and Spot Instances provides high availability and cost optimization. Managed node groups integrate with EC2 Auto Scaling and support diverse instance types, which improves fault tolerance. This configuration meets the requirements for high availability across multiple AZs and integration with AWS services like IAM, VPC, and CloudWatch.

Option B is incorrect because self-managed node groups require manual management of EC2 instances, increasing operational overhead, contrary to the goal of minimizing control plane management.

Option C is incorrect because a single managed node group in one AZ does not provide high availability across multiple AZs.

Option D is incorrect because Fargate launches pods without managing EC2 instances, but it may be less cost-effective for long-running containers and does not support all customizations needed for standard Kubernetes features.

Practice this question →
109
MCQhard

A company is migrating a large-scale on-premises Apache Kafka cluster to AWS. The cluster handles real-time streaming data from thousands of IoT devices. The company wants to reduce operational overhead and ensure high availability. Which AWS service should be used?

A.Amazon Managed Streaming for Apache Kafka (MSK)
B.Amazon Simple Notification Service (SNS)
C.Amazon Simple Queue Service (SQS)
D.Amazon Kinesis Data Streams
AnswerA

Amazon MSK provides a fully managed Apache Kafka service that reduces operational overhead and supports high availability for migrating existing Kafka clusters.

Why this answer

(Amazon MSK) is correct because Amazon MSK is a fully managed Apache Kafka service that reduces operational overhead and supports high availability. Option B (SNS) is wrong because Amazon SNS is a pub/sub messaging service, not a streaming platform compatible with Apache Kafka. Option C (SQS) is wrong because Amazon SQS is a queue service, not a streaming platform.

Option D (Kinesis Data Streams) is wrong because while it is a streaming service, it uses its own API and is not compatible with Apache Kafka, requiring significant re-architecture.

Practice this question →
110
Multi-Selectmedium

A company is migrating a legacy application that uses a proprietary binary protocol for communication. The application communicates over TCP/IP. The company wants to modernize the communication layer to use a RESTful API. Which TWO approaches should the company consider?

Select 2 answers
A.Replace the binary protocol with Amazon MQ.
B.Use Amazon API Gateway and AWS Lambda to create a REST API that translates requests to the legacy protocol.
C.Use AWS App Mesh to convert the binary protocol to HTTP.
D.Refactor the application to communicate over HTTP and use Amazon API Gateway.
E.Use Amazon CloudFront to cache the RESTful endpoints.
AnswersB, D

This allows the legacy protocol to be wrapped without modifying the backend.

Why this answer

Options B and D are correct. Option B: Using Amazon API Gateway and AWS Lambda allows the company to create a REST API that acts as a facade, translating RESTful calls into the legacy binary protocol, enabling gradual modernization without full application rewrite. Option D: Refactoring the application to communicate directly over HTTP and using Amazon API Gateway provides a modern, fully managed RESTful interface, which is the ideal long-term solution.

Option A (Amazon MQ) is a message broker and not designed for protocol translation to REST. Option C (AWS App Mesh) is a service mesh for observability and traffic control, not for protocol conversion. Option E (Amazon CloudFront) is a CDN and cannot translate protocols.

Practice this question →
111
MCQeasy

A company wants to migrate its on-premises file server to AWS. The file server contains 10 TB of data that changes infrequently. The company has a limited bandwidth internet connection and needs to complete the migration within one week. Which AWS service should the company use for the initial data transfer?

A.Amazon S3 Transfer Acceleration
B.AWS Snowball Edge
C.AWS Database Migration Service (DMS)
D.AWS DataSync
AnswerB

Snowball Edge is a physical device that can be shipped, bypassing bandwidth limitations.

Why this answer

AWS Snowball Edge. This is the best option for migrating 10 TB of data over a limited bandwidth connection within a week, as it physically transfers the data via a portable storage device, bypassing the need for network bandwidth. Option A (Amazon S3 Transfer Acceleration) is incorrect because it still relies on internet bandwidth, which is insufficient for the given timeline.

Option C (AWS DMS) is for database migrations, not file servers. Option D (AWS DataSync) also requires network connectivity and bandwidth, making it unsuitable for the large initial transfer over a slow connection.

Practice this question →
112
MCQeasy

A company is migrating an on-premises application to AWS. The application requires low-latency access to a file system that can be mounted by multiple EC2 instances simultaneously. Which AWS storage service should they use?

A.Amazon EFS
B.Amazon S3
C.Amazon FSx for Windows File Server
D.Amazon EBS
AnswerA

EFS provides a shared file system for multiple instances.

Why this answer

Amazon EFS is a scalable, elastic file system for Linux-based workloads that can be mounted by multiple EC2 instances simultaneously, providing low-latency access. S3 is object storage, not a file system, so it does not support file-level mounts. Amazon EBS volumes (including multi-attach) are block storage typically attached to a single instance; while io1/io2 with multi-attach can be shared, it is limited and not designed as a general-purpose shared file system.

Amazon FSx for Windows File Server is a managed Windows file server, suitable for Windows workloads, but EFS is simpler and more cost-effective for Linux-based applications requiring shared file access.

Practice this question →
113
MCQhard

Refer to the exhibit. An IAM policy is attached to an IAM user. The user tries to upload an object to `s3://my-bucket/secret/data.txt` from an IP address in the 10.0.0.0/8 range. What will happen?

A.The upload succeeds because the Allow statement grants s3:PutObject.
B.The upload succeeds because the Deny statement only applies to GetObject, not PutObject.
C.The upload fails because the Deny statement denies all s3 actions unconditionally.
D.The upload fails because the Deny statement explicitly denies s3:PutObject for the prefix secret/ from the specified IP range.
AnswerD

Deny overrides Allow, and conditions match.

Why this answer

The Deny statement explicitly denies all s3 actions (s3:*) for objects with the prefix secret/ when the source IP is in the 10.0.0.0/8 range. Since the user's IP is in that range and the object path starts with secret/, the Deny applies and overrides the Allow statement. Therefore, the upload fails.

Options A and B claim success, which is incorrect. Option C says it fails because the Deny is unconditional, but the Deny is conditional on the IP range and prefix, so C is inaccurate. Option D correctly identifies the explicit Deny for s3:PutObject (which is included in s3:*) under the given conditions.

Practice this question →
114
MCQhard

A company is migrating a stateful application to AWS. The application uses sticky sessions (session affinity) on the current on-premises load balancer. The company wants to use an Application Load Balancer (ALB) in AWS. Which feature should be enabled?

A.Connection draining (deregistration delay).
B.Sticky sessions (session affinity) using a cookie generated by the load balancer.
C.Health checks to ensure only healthy instances receive traffic.
D.Cross-zone load balancing.
AnswerB

Ensures requests from the same client go to the same target.

Why this answer

ALB supports sticky sessions (session affinity) using a cookie generated by the load balancer, which meets the requirement to maintain session state from the on-premises environment. Option A (connection draining) is used to allow in-flight requests to complete during instance deregistration, not for session affinity. Option C (health checks) ensures traffic is only sent to healthy instances, but does not maintain session stickiness.

Option D (cross-zone load balancing) distributes traffic evenly across all availability zones, but does not affect session affinity.

Practice this question →
115
MCQhard

A company is migrating a multi-tier application to AWS. The application has a web tier, application tier, and database tier. The company wants to use AWS services to improve scalability and reduce costs. Currently, the on-premises infrastructure is underutilized. What is the most cost-effective migration strategy?

A.Refactor the application to run on containers using Amazon EKS with Fargate.
B.Replatform the web tier to AWS Elastic Beanstalk and the database to Amazon RDS.
C.Rehost (lift-and-shift) to Amazon EC2 using AWS Application Migration Service, then right-size instances and purchase Reserved Instances.
D.Purchase compute-heavy EC2 instances to handle peak loads and use On-Demand pricing.
AnswerC

Lift-and-shift is fast, and reserved instances reduce costs.

Why this answer

The most cost-effective strategy for a migration with underutilized on-premises infrastructure is to lift-and-shift to EC2, right-size the instances to match actual usage, and purchase Reserved Instances to save costs. This approach minimizes changes and leverages AWS discounts. Options A and B involve rearchitecting or replatforming which are more costly and time-consuming.

Option D does not consider right-sizing and leads to overspending.

Practice this question →
116
MCQmedium

A company is migrating a stateful application to AWS. The application runs on a single on-premises server and uses local storage for persistent data. The company wants to achieve high availability and scalability. Which migration approach should the company use?

A.Use multiple EC2 instances behind an Application Load Balancer with sticky sessions.
B.Lift and shift to a single Amazon EC2 instance with an EBS volume.
C.Refactor the application to store state in Amazon ElastiCache or Amazon DynamoDB.
D.Use an EC2 Auto Scaling group with lifecycle hooks to persist state to EBS snapshots.
AnswerC

Refactoring to store state in Amazon ElastiCache or DynamoDB separates state from compute. This allows compute to scale in/out and instances to fail without data loss, achieving both HA and scalability.

Why this answer

The application is stateful and needs high availability and scalability. Refactoring to store state in managed services like Amazon ElastiCache or DynamoDB decouples state from compute, allowing compute to scale and be replaced without data loss. Option A is wrong: while an ALB with sticky sessions distributes traffic, it ties sessions to specific instances, making scaling and failover complex and not fully HA.

Option B is wrong: a single EC2 instance is a single point of failure and cannot scale. Option D is wrong: EBS snapshots are for backup/disaster recovery, not real-time HA or state persistence during scaling. Only option C properly addresses state management for HA and scalability.

Practice this question →
117
Multi-Selectmedium

A company is migrating a large number of files from on-premises to Amazon S3. The files are in a network-attached storage (NAS) system with a 1 Gbps connection to the internet. The company has a 2-week deadline to complete the migration. Which TWO services should the company use to accelerate the migration? (Choose TWO.)

Select 2 answers
A.AWS DataSync
B.AWS Transfer Family
C.AWS Snowball Edge
D.AWS Database Migration Service
E.AWS Direct Connect
AnswersA, C

DataSync can accelerate online transfers over the network.

Why this answer

(AWS DataSync) is correct because it can accelerate online transfers using parallel multi-threading and compression, making it suitable for migrating large numbers of files over a 1 Gbps connection within 2 weeks. Option C (AWS Snowball Edge) is correct because it provides a physical storage device that can handle large data volumes offline, bypassing network bandwidth limitations. Option B (AWS Transfer Family) is incorrect as it is designed for managed file transfer protocols, not for accelerating bulk migration.

Option D (AWS Database Migration Service) is incorrect because it is intended for database migrations, not file migrations. Option E (AWS Direct Connect) is incorrect because it requires provisioning a dedicated connection, which may take longer than 2 weeks to set up and does not directly provide data migration acceleration.

Practice this question →
118
MCQeasy

A company is migrating workloads to AWS using AWS Application Migration Service (AWS MGN). The source servers are running on VMware vSphere. After installing the AWS Replication Agent on the source servers, the migration waves are set up. However, during a test cutover, the test instance fails to launch with an error 'Insufficient IP address space in the target VPC'. What is the most likely cause?

A.The replication settings specify a subnet with an incorrect CIDR block
B.The IAM role for AWS MGN does not have permissions to create network interfaces
C.The target VPC subnet does not have enough available IP addresses
D.The AWS MGN service is not enabled in the target AWS Region
AnswerC

The test instance requires an available IP in the target subnet; insufficient IPs cause launch failure.

Why this answer

The error 'Insufficient IP address space in the target VPC' indicates that the subnet used for test instances does not have enough available IP addresses to launch the instance. AWS MGN allocates IP addresses from the specified subnet during instance launch. Option A is incorrect because a CIDR mismatch would cause a different error, typically related to subnet configuration.

Option B is incorrect because IAM permission issues would result in an access denied error, not an IP space error. Option D is incorrect because the service not being enabled would produce a different error (e.g., service not available). Therefore, the most likely cause is insufficient available IP addresses in the target VPC subnet.

Practice this question →
119
MCQhard

A company is migrating a legacy PHP application running on a single on-premises server to AWS. The application stores session data locally on the server's filesystem. The company wants to achieve high availability and elasticity for the application on AWS. What should the company do to handle session state in the new architecture?

A.Configure an Application Load Balancer with sticky sessions enabled
B.Store session data in Amazon ElastiCache for Redis
C.Use Amazon EFS to share the session files across multiple EC2 instances
D.Refactor the application to use Amazon Cognito for session management
AnswerB

Correct. ElastiCache provides a centralized, fast session store for distributed applications.

Why this answer

Using ElastiCache for session storage decouples session state from individual servers, allowing the application to scale horizontally. Sticky sessions with an ALB ties a user to a specific instance, which reduces availability if that instance fails. Storing sessions on EFS is possible but slower than ElastiCache.

Re-architecting to use Cognito is unnecessary for session state.

Practice this question →
120
MCQeasy

A company is modernizing a legacy application by breaking it into microservices. The application has a complex set of dependencies and requires gradual migration. Which design pattern should the company use?

A.Blue/Green deployment pattern
B.Saga pattern
C.Strangler Fig pattern
D.Circuit Breaker pattern
AnswerC

Strangler Fig allows gradually replacing monolith components with microservices.

Why this answer

(Strangler Fig pattern) because it allows incremental replacement of legacy system functionality with microservices, enabling gradual migration despite complex dependencies. Option A (Blue/Green deployment) is a deployment strategy, not a migration pattern. Option B (Saga pattern) is for managing distributed transactions, not incremental replacement.

Option D (Circuit Breaker) is a fault-tolerance pattern.

Practice this question →
121
MCQeasy

A company is migrating a critical application to AWS and needs to ensure business continuity during the migration. The application must remain available with minimal downtime. Which AWS service should be used to replicate data continuously?

A.AWS Direct Connect
B.AWS Database Migration Service (DMS) with ongoing replication
C.Amazon S3 Transfer Acceleration
D.AWS Snowball Edge
AnswerB

DMS supports continuous replication to minimize downtime.

Why this answer

AWS Database Migration Service (DMS) with ongoing replication can keep source and target databases in sync, allowing for minimal downtime during migration. Option A is wrong because AWS Direct Connect provides a dedicated network connection, not a replication service. Option C is wrong because Amazon S3 Transfer Acceleration is for faster uploads to S3, not for database replication.

Option D is wrong because AWS Snowball Edge is an offline data transfer device, not a continuous replication tool.

Practice this question →
122
MCQeasy

Refer to the exhibit. A company deploys this CloudFormation template. After deployment, they enable S3 Transfer Acceleration on the bucket. Later, they update the stack. What happens to the Transfer Acceleration setting?

A.CloudFormation enables Transfer Acceleration because it is a best practice.
B.The update fails because of a conflict between the template and the manual change.
C.CloudFormation removes the Transfer Acceleration setting because it is not defined in the template.
D.The Transfer Acceleration setting remains unchanged after the update.
AnswerD

Manual changes persist unless the template manages that property.

Why this answer

CloudFormation drift detection does not automatically revert manual changes. The Transfer Acceleration setting is a property of the bucket; if not defined in the template, CloudFormation may not manage it, but typically manual changes are not overwritten unless the template explicitly defines them. However, best practice is to define all settings in the template to avoid drift.

Option A is wrong because CloudFormation does not automatically disable it. Option B is wrong because CloudFormation does not automatically enable it. Option C is wrong because updates do not reset to default.

Practice this question →
123
MCQhard

A company is migrating a 10 TB SQL Server database to Amazon Aurora PostgreSQL. The migration must have minimal downtime. The source database is running on-premises with a 1 Gbps network link to AWS. Which strategy should be used to reduce the migration downtime?

A.Use AWS Database Migration Service (DMS) with full load and ongoing replication.
B.Take a full backup of the SQL Server database, upload it to Amazon S3, and restore to Aurora.
C.Use AWS Schema Conversion Tool (SCT) to convert the schema, then export data to flat files and upload to S3.
D.Create an Amazon Aurora read replica from the on-premises database.
AnswerA

DMS supports both full load and continuous replication, minimizing cutover downtime.

Why this answer

AWS Database Migration Service (DMS) is the correct choice because it combines a full load of the existing data with ongoing replication to capture incremental changes, minimizing downtime. Option A allows the target Aurora database to stay in sync with the source SQL Server until a cutover. Option B (backup/restore) requires significant downtime to take and restore the backup, and does not support ongoing replication.

Option C (SCT) only converts the schema and exports data, missing the replication needed for minimal downtime. Option D is incorrect because an Aurora read replica can only be created from another Aurora DB instance, not from an on-premises database.

Practice this question →
124
MCQhard

A company attaches the IAM policy shown in the exhibit to an IAM user. The user tries to upload an object to my-bucket using the AWS CLI without the --ssl flag (i.e., using HTTP). What will happen?

A.The upload fails with an implicit denial because the Allow condition is not met.
B.The upload succeeds because the Allow statement grants s3:PutObject.
C.The upload fails with an explicit deny because of the Deny statement.
D.The upload succeeds because there is no explicit Deny for s3:PutObject.
AnswerC

The Deny statement blocks non-HTTPS requests explicitly.

Why this answer

The Deny statement with aws:SecureTransport=false explicitly denies non-HTTPS requests. Option A is wrong because the Allow statement requires HTTPS. Option B is wrong because the Deny is explicit.

Option D is wrong because the Deny is explicit.

Practice this question →
125
MCQeasy

Refer to the exhibit. A company is using AWS Migration Hub to track migrations. The above IAM policy is attached to an IAM role used by the migration tool. The migration tool reports that it cannot register the migration task with Migration Hub. Which action should the company add to the policy to fix the issue?

A.mgh:ImportMigrationTask
B.mgh:AssociateDiscoveredResource
C.mgh:CreateHomeRegion
D.mgh:GetHomeRegion
AnswerA

The migration tool needs mgh:ImportMigrationTask to register a migration task.

Why this answer

The migration tool needs mgh:ImportMigrationTask to register a migration task. Option B (AssociateDiscoveredResource) is for associating resource data, not registering tasks. Option C (CreateHomeRegion) is not needed.

Option D (GetHomeRegion) is read-only.

Practice this question →
126
MCQmedium

A company is migrating a critical application to AWS using a lift-and-shift approach. The application runs on two on-premises servers: a web server and a database server running SQL Server. The company has deployed the web server on an EC2 instance behind an Application Load Balancer, and the database on an RDS for SQL Server Multi-AZ instance. After migration, users report that the application is noticeably slower compared to on-premises. The application uses a large number of database transactions, and latency between the web server and database has increased. The web server is in us-east-1a, and the RDS primary instance is in us-east-1b. The solutions architect verifies that the application is using the RDS endpoint, not the IP address. What should the architect do to reduce latency?

A.Enable Multi-AZ on the web server EC2 instance.
B.Move the web server EC2 instance to the same Availability Zone as the RDS primary instance.
C.Upgrade the web server EC2 instance to a larger instance type with enhanced networking.
D.Deploy Amazon CloudFront in front of the web server to cache responses.
AnswerB

Same-AZ placement eliminates cross-AZ network latency.

Why this answer

Colocating the web server and RDS primary in the same Availability Zone minimizes network latency. RDS Multi-AZ automatically manages failover, and the web server should be in the same AZ as the primary to avoid cross-AZ latency. Enabling Multi-AZ on the web server does not help.

Using a larger instance does not reduce latency. CloudFront is for content delivery, not database latency.

Practice this question →
127
MCQmedium

An administrator attempts to start an EC2 instance that was previously stopped. The instance fails to start. The administrator runs the CLI command shown in the exhibit. What is the most likely cause of the failure?

A.The instance is in the 'stopped' state and needs to be started.
B.The instance ID is incorrect.
C.The instance is in 'pending' state and will start automatically.
D.The instance has been terminated.
AnswerA

The State is 'stopped', so the administrator needs to start it.

Why this answer

The instance is in 'stopped' state (Code 80), not 'running'. Option B is wrong because the state is stopped, not pending. Option C is wrong because there is no error in the output.

Option D is wrong because the output shows the instance exists.

Practice this question →
128
MCQeasy

A company is migrating a legacy Windows application to AWS. The application requires a shared file system accessible from multiple EC2 instances. Which AWS storage solution should the company use?

A.Amazon Elastic File System (EFS)
B.Amazon FSx for Windows File Server
C.Amazon Elastic Block Store (EBS) with multi-attach enabled
D.Amazon Simple Storage Service (S3)
AnswerB

FSx provides native SMB file sharing for Windows instances.

Why this answer

Amazon FSx for Windows File Server provides a fully managed native Windows file system that supports the SMB protocol, which is required for legacy Windows applications to access shared file systems. Amazon EFS uses NFS, which is not natively supported by Windows. EBS with multi-attach is limited to a small number of instances and not ideal for file sharing.

S3 is object storage and does not provide a traditional file system interface.

Practice this question →
129
MCQmedium

A company is migrating an application that uses an S3 bucket to store user uploads. The IAM policy above is attached to the application's IAM role. The application is experiencing permission errors when trying to list objects in the bucket. What is the most likely cause?

A.The policy allows ListBucket but the application is trying to list objects in a prefix that requires additional permissions.
B.The resource ARN for the s3:ListBucket action is incorrect. It should be arn:aws:s3:::example-bucket/*.
C.The policy is missing the s3:GetObject action on the bucket itself.
D.The policy needs a condition to restrict access to specific IP addresses.
AnswerA

Correct. The policy allows ListBucket, but if a condition restricts listing to a specific prefix, the application's attempt to list a different prefix will fail with a permission error.

Why this answer

The policy grants s3:ListBucket on the bucket resource, but it may include a condition that restricts listing to a specific prefix (e.g., s3:prefix). If the application is trying to list objects in a different prefix, the request fails with a permission error. Listing objects requires the s3:ListBucket permission on the bucket, and if the policy has a prefix condition, the application must use the allowed prefix.

Therefore, the most likely cause is that the application is attempting to list objects in a prefix that is not permitted by the policy's conditions.

Exam trap

Candidates often think that listing objects requires s3:GetObject on the bucket, but in reality, s3:GetObject is an object-level permission. However, a common trap is that the ListBucket permission may be restricted by prefix conditions, and attempting to list a different prefix causes permission errors.

Practice this question →
130
MCQmedium

A company is migrating an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. They need to minimize downtime and ensure data consistency. Which AWS service should they use for the migration?

A.AWS DataSync
B.AWS Schema Conversion Tool (SCT)
C.AWS Database Migration Service (DMS)
D.AWS Glue
AnswerC

AWS Database Migration Service (DMS) supports heterogeneous migrations with minimal downtime using continuous replication.

Why this answer

(AWS DMS) is correct because it supports homogeneous migrations with minimal downtime using continuous replication. Option A (DataSync) is for file-based data. Option B (SCT) only provides schema conversion.

Option D (Glue) is for ETL jobs.

Practice this question →
131
MCQmedium

A company is migrating a monolithic application to AWS. The application consists of a web server, an application server, and a MySQL database. The web server and application server run on the same EC2 instance. The company wants to minimize changes during migration. Which migration strategy should the architect recommend?

A.Refactor the application into microservices on Amazon ECS
B.Replatform by migrating the database to Amazon RDS
C.Rehost using AWS Application Migration Service (AWS MGN)
D.Retire the application and replace it with a SaaS solution
AnswerC

Rehosting moves the application with minimal changes, which aligns with the requirement to minimize changes.

Why this answer

Rehosting (lift-and-shift) moves the application as-is to EC2, requiring minimal changes. Replatforming would involve changes like using RDS. Refactoring would require code changes.

Retiring is not applicable as the application is still needed.

Practice this question →
132
MCQhard

A company is migrating a legacy Java-based customer relationship management (CRM) system from on-premises to AWS. The application currently runs on a single physical server with a monolithic architecture. The application stores data in an Oracle database on a separate server. The company has purchased a third-party migration tool that can convert Oracle stored procedures to Amazon Aurora PostgreSQL-compatible code. The migration team has successfully migrated the database to Aurora PostgreSQL using AWS DMS with ongoing CDC. The application now runs on a single EC2 instance in a test environment. However, during load testing, the application experiences high latency and intermittent timeouts when accessing the database. The team notices that the application makes many short-lived database connections and uses a connection pool that was configured for the on-premises environment. The team has also observed that the application logs show a high number of connection timeouts. The company wants to modernize the application to be highly available and scalable on AWS. Which combination of actions should the team take to resolve the performance issues and achieve the company's goals?

A.Deploy the application on Amazon ECS with Fargate, and use Amazon RDS Proxy to manage database connections efficiently. Refactor the application to separate components into multiple microservices.
B.Use Amazon ElastiCache to cache database query results and reduce the number of direct database connections. Keep the application on a single EC2 instance but use an Auto Scaling group with a minimum of one instance.
C.Increase the connection pool size in the application configuration to handle more concurrent requests. Then deploy the application on a larger EC2 instance to handle the load.
D.Migrate the application to run on AWS Lambda with a connection pool managed by the Lambda function. Use Amazon RDS Proxy to handle the database connections.
AnswerA

Correct. RDS Proxy reduces connection overhead, and microservices enable scalability and HA.

Why this answer

The issue is likely due to the connection pool being inefficient for the cloud environment and the monolithic architecture not scaling. Deploying the application as microservices on containers with an RDS Proxy for connection pooling addresses both performance and high availability. Simply increasing connection pool size may overwhelm the database.

Using Lambda would require significant refactoring. Vertical scaling does not provide high availability.

Practice this question →
133
Multi-Selecthard

A company is replatforming a legacy application to use AWS managed services. The application consists of a web server, an application server, and a MySQL database. Which THREE AWS services should the company use to modernize the architecture? (Choose THREE.)

Select 3 answers
A.Amazon ElastiCache
B.Amazon EBS
C.Elastic Load Balancing
D.Amazon Route 53
E.Amazon EC2
.Amazon RDS for MySQL
AnswersA, C

ElastiCache provides managed caching.

Why this answer

To modernize the legacy application to use AWS managed services, the company should use Amazon RDS for MySQL to replace the self-managed MySQL database, Elastic Load Balancing to distribute traffic across web/application servers, and Amazon ElastiCache to add caching for improved performance. Amazon EBS is a block storage service, not a managed compute or database service. Amazon Route 53 is a DNS service and not relevant to the application architecture modernization in this context.

Amazon EC2 is an unmanaged compute service, which does not align with the goal of using managed services.

Practice this question →
134
Multi-Selecteasy

A company is planning to migrate a large .NET application to AWS. The application uses IIS and SQL Server. Which TWO AWS services can be used to rehost the application with minimal changes?

Select 2 answers
A.Amazon Aurora
B.Amazon EC2 with Windows Server
C.AWS Elastic Beanstalk
D.Amazon RDS for SQL Server
E.AWS Lambda
AnswersB, D

EC2 can host IIS with minimal changes.

Why this answer

(Amazon EC2 with Windows Server) and Option D (Amazon RDS for SQL Server) are correct. EC2 allows rehosting the web server, and RDS for SQL Server provides a managed database. Option A (Amazon Aurora) is not SQL Server compatible.

Option C (AWS Elastic Beanstalk) may require changes. Option E (AWS Lambda) is for serverless.

Practice this question →
135
MCQeasy

A company is migrating a critical application to AWS and wants to ensure business continuity during the cutover. The migration plan includes a pilot light strategy. Which of the following BEST describes the pilot light pattern?

A.Take regular backups and restore them in AWS during cutover.
B.Run a scaled-down but fully functional version of the environment in AWS at all times.
C.Replicate data to AWS and run a minimal version of the application that can be scaled up during cutover.
D.Run the application simultaneously in both environments and route traffic to both.
AnswerC

Correct definition of pilot light.

Why this answer

The pilot light pattern is a disaster recovery strategy where core data is continuously replicated to AWS, and a minimal version of the application (e.g., a small EC2 instance running the application stack) is kept running. During cutover, this minimal environment is rapidly scaled up to full production capacity. This matches option C, as it describes replicating data and running a minimal version that can be scaled up.

Exam trap

The trap here is confusing the pilot light pattern with the warm standby pattern, as both involve a running environment in AWS, but pilot light uses a minimal stack that is not fully functional until scaled up, whereas warm standby runs a fully functional scaled-down version.

How to eliminate wrong answers

Option A is wrong because taking regular backups and restoring them is a backup-and-restore strategy, not a pilot light pattern; it has a higher recovery time objective (RTO) and does not maintain a running environment. Option B is wrong because running a scaled-down but fully functional version at all times describes the warm standby pattern, not the pilot light; pilot light keeps only the core data and a minimal application stack, not a fully functional environment. Option D is wrong because running the application simultaneously in both environments and routing traffic to both describes a multi-site active-active pattern, which is not the pilot light pattern.

Practice this question →
136
MCQhard

A company is migrating a critical application to AWS. The application must be highly available across two Availability Zones. The migration plan includes rehosting the application on EC2 instances in an Auto Scaling group behind an ALB. Which configuration ensures that the application remains available during an Availability Zone failure?

A.Use an Auto Scaling group with a minimum of 2 across two Availability Zones, with a distribution strategy of 'balanced best effort'
B.Use an Auto Scaling group with a minimum of 1 and maximum of 10 across two AZs
C.Launch instances in a single Availability Zone with multiple subnets
D.Launch instances in two Availability Zones but place all instances in the same subnet
AnswerA

Auto Scaling group with minimum 2 across two AZs ensures at least one instance per AZ.

Why this answer

It uses a minimum of 2 instances across two Availability Zones with the 'balanced best effort' distribution strategy. This ensures that instances are evenly distributed across AZs, with at least one instance per AZ. If one AZ fails, the other AZ still has an instance to serve traffic.

Option B is incorrect because a minimum of 1 and maximum of 10 does not guarantee at least one instance per AZ; the Auto Scaling group could place all instances in one AZ. Option C is incorrect because a single AZ is a single point of failure; if that AZ fails, all instances are lost. Option D is incorrect because placing all instances in the same subnet (which is in a single AZ) does not provide AZ-level fault tolerance.

Practice this question →
137
Multi-Selectmedium

A company is migrating a multi-tier application to AWS and wants to modernize by using containers and serverless technologies. The application consists of a Node.js frontend, a Java backend, and a PostgreSQL database. The company wants to reduce operational overhead and improve scalability. Which TWO strategies should the company use? (Choose two.)

Select 2 answers
A.Refactor the Node.js frontend to run on AWS Lambda with Amazon API Gateway
B.Migrate the database to Amazon RDS for PostgreSQL
C.Migrate the database to Amazon DynamoDB
D.Deploy the Java backend on Amazon ECS with AWS Fargate
E.Deploy the Java backend on Amazon EC2 with Auto Scaling
AnswersB, D

RDS reduces operational overhead compared to managing PostgreSQL on EC2.

Why this answer

Amazon RDS for PostgreSQL reduces operational overhead by managing backups, patching, and replication, while providing scalability through read replicas and storage auto-scaling. This aligns with the goal of modernizing the database layer without changing the database engine, avoiding the need to refactor the application to use a NoSQL database like DynamoDB.

Exam trap

The trap here is that candidates often assume that any use of containers or serverless must involve Lambda, but for stateful or long-running Java backends, ECS with Fargate is more appropriate than Lambda, and DynamoDB is not a drop-in replacement for PostgreSQL without significant application changes.

Practice this question →
138
MCQmedium

A company is migrating a Windows-based .NET application to AWS. The application uses SQL Server for its database and stores documents on a Windows file share. The company wants to adopt a hybrid model initially, where the application runs on AWS but still connects to on-premises resources for legacy integration. The migration must use a phased approach: first move the compute to AWS, then the database, and finally the file storage. The company has high latency to the internet and wants to optimize data transfer. You have set up a Direct Connect connection. During the first phase, you migrate the web and application servers to Amazon EC2 Windows instances. You need to ensure that the EC2 instances can access the on-premises SQL Server and file share securely. Which combination of actions should be taken?

A.Place the EC2 instances in a private subnet. Create a VPN connection or use Direct Connect virtual interface to connect to on-premises. Configure security groups to allow traffic to on-premises SQL Server and file share.
B.Place the EC2 instances in a private subnet with a NAT gateway. Use VPC peering to on-premises.
C.Place the EC2 instances in a public subnet. Use an internet gateway and configure security groups to allow inbound traffic from on-premises IPs.
D.Use Amazon EC2-Classic and link the instances to on-premises via ClassicLink.
AnswerA

Provides secure, low-latency access via Direct Connect.

Why this answer

Placing EC2 instances in a private subnet and using a Direct Connect virtual interface (or VPN) provides a secure, low-latency connection to on-premises resources. Security groups can be configured to allow traffic only to the necessary on-premises SQL Server and file share. Option B is wrong because VPC peering is used to connect VPCs within AWS, not for on-premises connectivity; a NAT gateway is for outbound internet access from private subnets, not for secure access to on-premises resources.

Option C is wrong because placing instances in a public subnet with an internet gateway exposes them to internet traffic, which is less secure and does not leverage the Direct Connect connection. Option D is wrong because ClassicLink is a legacy feature that was used for linking EC2-Classic instances to a VPC, but EC2-Classic is no longer available, and it does not provide on-premises connectivity.

Practice this question →
139
Multi-Selectmedium

A company is planning to migrate a three-tier web application to AWS. The application consists of a web server, an application server, and a MySQL database. The company wants to minimize operational overhead and improve scalability. Which THREE AWS services should the company use to modernize the architecture? (Choose THREE.)

Select 3 answers
A.AWS Lambda
B.Elastic Load Balancing (ELB)
C.Amazon EC2 instances
D.Amazon ECS with Fargate
E.Amazon RDS for MySQL
AnswersB, D, E

ELB distributes traffic to improve availability.

Why this answer

(Elastic Load Balancing) distributes incoming traffic across multiple targets, improving scalability and availability. Option D (Amazon ECS with Fargate) runs containers without managing servers, reducing operational overhead. Option E (Amazon RDS for MySQL) manages the MySQL database with automated backups, patching, and scaling, minimizing administrative tasks.

Option A (AWS Lambda) is not suitable for long-running application servers due to execution time limits and stateless nature. Option C (Amazon EC2 instances) requires manual management of instances, increasing operational overhead.

Practice this question →
140
MCQmedium

A company is migrating a legacy on-premises application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The migration must minimize downtime and require minimal changes to the application. Which migration strategy should the company use?

A.Migrate the database to Amazon RDS with a compatible engine and modify connection strings.
B.Rehost the application on Amazon EC2 instances and migrate the database using AWS Database Migration Service (DMS) with ongoing replication.
C.Refactor the application to use Amazon Aurora and modify the code to use the Aurora query interface.
D.Replace the database with Amazon DynamoDB and rewrite database access layer.
AnswerB

Rehosting on EC2 allows the same database engine, and DMS with replication minimizes downtime.

Why this answer

Rehosting (lift-and-shift) the application on Amazon EC2 allows the proprietary database to run without modification. Using AWS Database Migration Service (DMS) with ongoing replication minimizes downtime by keeping the database synchronized until cutover. Option A is incorrect because the proprietary database is not supported by Amazon RDS, so migrating to RDS is not feasible without changing the database engine.

Option C is incorrect because refactoring to Amazon Aurora would require modifying the application code to use Aurora's query interface, resulting in significant changes. Option D is incorrect because replacing the database with Amazon DynamoDB would necessitate rewriting the entire database access layer, which is not minimal change.

Practice this question →
141
Multi-Selecteasy

A company is planning to migrate a workload to AWS and needs to estimate the total cost of ownership (TCO) compared to on-premises. Which TWO AWS tools can be used to perform this analysis?

Select 2 answers
A.AWS Pricing Calculator
B.AWS Organizations
C.AWS Cost Explorer
D.AWS TCO Calculator
E.AWS Budgets
AnswersA, D

Estimates monthly costs for AWS services.

Why this answer

Options A and D are correct. AWS Pricing Calculator estimates costs of AWS services. AWS TCO Calculator compares on-premises costs to AWS.

Option B (AWS Organizations) is wrong because it is for managing multiple AWS accounts, not cost analysis. Option C (AWS Cost Explorer) is wrong because it analyzes existing AWS spending, not TCO. Option E (AWS Budgets) is wrong because it tracks spending against budgets, not TCO comparison.

Practice this question →
142
MCQeasy

A company is migrating a web application to AWS and wants to use a containerized architecture. The application consists of multiple microservices that communicate via REST APIs. The company needs a solution that minimizes operational overhead for managing containers and orchestrating microservices. Which AWS service should the company use?

A.Amazon EKS with managed node groups.
B.AWS Lambda functions for each microservice.
C.Amazon EC2 with Docker installed on each instance.
D.Amazon ECS with AWS Fargate launch type.
AnswerD

Fargate is serverless and reduces overhead.

Why this answer

Amazon ECS with the Fargate launch type is the correct choice because it allows you to run containers without managing the underlying servers or cluster, thus minimizing operational overhead. Fargate is a serverless compute engine for containers, perfectly suited for microservices requiring minimal management. Option A (EKS with managed node groups) still requires management of worker nodes and is more complex.

Option B (Lambda) is for functions, not containerized microservices. Option C (EC2 with Docker) involves significant operational overhead for managing instances and Docker.

Practice this question →
143
MCQhard

A company is migrating a large-scale, stateful application to AWS. The application maintains session state in memory on the current on-premises servers. The company needs a solution that preserves session state during migration and minimizes latency for users worldwide. Which strategy should the company use?

A.Use AWS Global Accelerator to gradually shift traffic, and use Amazon ElastiCache for Redis to centralize session state
B.Use Amazon Route 53 weighted routing to shift traffic to new EC2 instances, and store session state in Amazon S3
C.Use AWS CloudFront to cache static content, and use Amazon DynamoDB for session state
D.Use AWS Global Accelerator to shift traffic, and deploy AWS WAF to protect the application
AnswerA

Global Accelerator provides anycast IP and traffic shifting; ElastiCache provides low-latency state sharing.

Why this answer

AWS Global Accelerator allows you to gradually shift traffic from on-premises to AWS using endpoint weights, minimizing disruption during migration. Amazon ElastiCache for Redis provides a centralized, in-memory session store that preserves session state across the migration, ensuring low-latency access for users worldwide by leveraging Global Accelerator's anycast IP and AWS edge locations.

Exam trap

The trap here is that candidates often confuse Route 53 weighted routing with Global Accelerator's traffic-shifting capabilities, overlooking that Global Accelerator provides both performance optimization and gradual traffic migration, while Route 53 alone lacks the anycast edge network and fine-grained endpoint weight management needed for low-latency stateful migration.

How to eliminate wrong answers

Option B is wrong because Amazon S3 is not designed for low-latency session state storage; its eventual consistency and higher latency make it unsuitable for real-time session management, and Route 53 weighted routing lacks the traffic-shifting granularity and performance optimization of Global Accelerator. Option C is wrong because CloudFront caching static content does not address session state preservation; DynamoDB can store session state but introduces higher latency compared to in-memory solutions like ElastiCache for Redis, and CloudFront does not provide traffic shifting for migration. Option D is wrong because AWS WAF is a web application firewall that protects against web exploits, not a mechanism for preserving session state or shifting traffic; Global Accelerator alone without a centralized session store does not solve the stateful migration requirement.

Practice this question →
144
Multi-Selecthard

A company is migrating a legacy application to AWS. The application runs on Windows Server and uses a shared file system for storage. The company wants to modernize the application by using a managed file storage service that is POSIX-compliant and can be accessed by multiple EC2 instances concurrently. Which TWO AWS services meet these requirements? (Choose TWO.)

Select 2 answers
A.Amazon EBS
B.Amazon FSx for Lustre
C.Amazon S3
D.Amazon S3 Glacier
E.Amazon EFS
AnswersB, E

FSx for Lustre is POSIX-compliant and supports concurrent access.

Why this answer

Amazon EFS (Option E) and Amazon FSx for Lustre (Option B) are both POSIX-compliant file systems that can be accessed concurrently by multiple EC2 instances. Option A (Amazon EBS) is block storage that can be attached to only one instance at a time (unless using multi-attach, which has limitations). Option C (Amazon S3) is object storage, not POSIX-compliant.

Option D (Amazon S3 Glacier) is archival storage and not suitable for shared file system access.

Practice this question →
145
MCQmedium

A company is migrating its application stack from on-premises to AWS using a rehost strategy. The stack includes a web server, an application server, and a MySQL database. The company wants to automate the migration using AWS Application Migration Service (MGN). After configuring MGN, the web server test instance fails to start because the boot volume is missing the boot sector. What is the most likely cause?

A.The EBS volume size is smaller than the source volume.
B.The source volume was not shut down cleanly before replication.
C.The source web server uses an unsupported instance type.
D.The source OS is not supported by MGN.
AnswerB

Dirty shutdown can corrupt boot sector.

Why this answer

If the source volume is not shut down cleanly before replication, the replicated volume may be in an inconsistent state, leading to a missing boot sector. AWS Application Migration Service requires consistent volumes to ensure successful boot. Option A is incorrect because the EBS volume size does not affect the boot sector; a smaller volume would likely cause a different error.

Option C is incorrect because the instance type does not impact the boot sector; MGN supports various instance types. Option D is incorrect because an unsupported OS would typically result in an incompatibility error, not a missing boot sector.

Practice this question →
146
MCQhard

A company is migrating a 3-tier web application from on-premises to AWS. The application consists of a Linux Apache HTTP server, a Java application server (Tomcat), and a MySQL database. The company wants to use AWS managed services to reduce operational overhead. The migration plan includes using AWS Elastic Beanstalk for the web and application tiers, and Amazon RDS for MySQL for the database. During a test migration, the team notices that the application is experiencing intermittent connection timeouts when the web tier attempts to connect to the application tier. The web and application tiers are deployed in separate Elastic Beanstalk environments, both in the same VPC, same region, and same Availability Zone. The security groups allow traffic from the web tier to the application tier on port 8080. What is the MOST likely cause of the connection timeouts?

A.The application tier is configured with an internal Application Load Balancer, but the web tier is unable to resolve the DNS name of the load balancer.
B.The web tier and application tier are in different Availability Zones, causing increased latency and timeouts.
C.The web tier is trying to connect directly to the application tier instances, but the application tier's security group does not allow inbound traffic from the web tier's security group.
D.The Elastic Beanstalk environment's health check URL is misconfigured, causing the instances to be marked as unhealthy and removed from the load balancer.
AnswerC

The web tier should connect to the application tier's load balancer, but the security group of the load balancer must allow traffic from the web tier.

Why this answer

The most likely cause is that the web tier is configured to connect directly to the application tier instances rather than to the application tier's load balancer. In Elastic Beanstalk, each environment typically includes an Auto Scaling group and a load balancer. For the web tier to communicate with the application tier, it should connect to the application tier's load balancer DNS name.

If the web tier attempts to connect directly to the application tier instances, the application tier's security group must allow inbound traffic from the web tier's security group. If that rule is missing or misconfigured, connections will time out. Option A is incorrect because DNS resolution for an internal ALB generally works within the same VPC.

Option B is incorrect because both environments are in the same Availability Zone. Option D is incorrect because health check misconfiguration would affect the load balancer's routing, not cause direct connection timeouts between tiers.

Practice this question →
147
MCQeasy

A company is migrating its on-premises file server to Amazon FSx for Windows File Server. The company has 2 TB of data and a 100 Mbps internet connection. The migration must be completed within 5 days. What should the company do?

A.Order a new AWS Direct Connect connection.
B.Use AWS Snowcone to physically ship the data.
C.Use AWS DataSync over the internet to transfer data.
D.Use AWS Snowball Edge to transfer data.
AnswerB

Fast and cost-effective for 2 TB.

Why this answer

Snowcone is designed for small data volumes (up to 8 TB) and can be shipped to AWS within days, meeting the 5-day deadline. Option A is wrong because provisioning a new Direct Connect connection typically takes weeks, which exceeds the 5-day deadline. Option C is wrong because DataSync over the internet with a 100 Mbps connection would take approximately 48 hours or more, and the process may introduce delays or reliability issues; AWS recommends physical devices for smaller datasets under tight timelines.

Option D is wrong because Snowball Edge is intended for larger data volumes (up to 80 TB) and is oversized for 2 TB; Snowcone is a more appropriate and cost-effective choice.

Practice this question →
148
Multi-Selecthard

A company is migrating a legacy application to AWS. The application uses a custom authentication mechanism that relies on LDAP. The company wants to minimize changes to the application. Which THREE services should the company consider for integrating LDAP authentication? (Choose THREE.)

Select 3 answers
A.AWS Directory Service Simple AD
B.AWS Directory Service AD Connector
C.AWS Directory Service for Microsoft Active Directory
D.Amazon Cognito user pools
E.AWS Identity and Access Management (IAM)
AnswersA, B, C

Simple AD is a low-cost LDAP directory.

Why this answer

A, B, and C are correct because AWS Directory Service Simple AD (A) provides a low-cost LDAP-compatible directory, AD Connector (B) relays LDAP requests to an on-premises Active Directory, and AWS Directory Service for Microsoft Active Directory (C) supports LDAP natively. D (Amazon Cognito user pools) is incorrect because it is designed for external identity providers (e.g., social or enterprise federation) and does not support direct LDAP integration. E (AWS Identity and Access Management) is incorrect because IAM manages permissions for AWS resources but does not provide LDAP authentication services.

Practice this question →
149
Multi-Selectmedium

A company is planning to migrate a legacy application to AWS. The application runs on a single server with a monolithic architecture and uses an Oracle database. The migration team wants to reduce licensing costs and improve scalability. Which TWO strategies should the team consider?

Select 2 answers
A.Replatform the application to use AWS Elastic Beanstalk and Amazon RDS for PostgreSQL.
B.Refactor the application into microservices and use Amazon DynamoDB for data storage.
C.Replatform the database to Amazon RDS for PostgreSQL and refactor the application to use it.
D.Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with license-included.
E.Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with BYOL.
AnswersA, C

Reduces operational overhead and licensing costs.

Why this answer

Replatforming the application to AWS Elastic Beanstalk reduces operational overhead by automating capacity provisioning, load balancing, and scaling, while migrating from Oracle to Amazon RDS for PostgreSQL eliminates Oracle licensing costs and provides a managed database service with built-in high availability and scalability. This approach directly addresses the company's goals of reducing licensing costs and improving scalability without requiring a full application rewrite.

Exam trap

The trap here is that candidates may confuse 'replatforming' (option A and C) with 'refactoring' (option B) or assume that rehosting with Oracle BYOL (option E) reduces costs, when in fact BYOL still requires existing licenses and does not eliminate licensing expenses.

Practice this question →
150
MCQmedium

A company is migrating a multi-tier web application to AWS. The application uses sticky sessions (session affinity). The company wants to use an Application Load Balancer (ALB). How should the architect configure the ALB to support sticky sessions?

A.Configure the ALB listener to use a custom header for session affinity.
B.Enable stickiness on the target group and set a cookie expiration duration.
C.Use a Network Load Balancer (NLB) and enable proxy protocol.
D.Place an Amazon ElastiCache cluster in front of the ALB to store session data.
AnswerB

ALB supports sticky sessions via a cookie; configuration is on the target group.

Why this answer

ALB supports sticky sessions by enabling stickiness on the target group and setting a cookie expiration duration. Option A is wrong because ALB uses cookies for session affinity, not a custom header. Option C is wrong because the question specifies using an ALB, not an NLB, and proxy protocol is for preserving client IP, not sticky sessions.

Option D is wrong because placing ElastiCache in front of the ALB is not a load balancer configuration; it is an external solution for storing session data.

Exam trap

Candidates often confuse the location where stickiness is configured: it's on the target group, not the listener or load balancer.

Practice this question →
← PreviousPage 2 of 5 · 331 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Migration Modernization questions.

Start 20-question session