Knowledge + Practice

CCNA Migration Modernization Questions

75 of 331 questions · Page 4/5 · Migration Modernization topic · Answers revealed

Practice these questions Exam hub All questions

226

MCQhard

A company is using AWS Migration Hub to track a server migration. The migration task has failed with the error shown in the exhibit. Which action should the solutions architect take to resolve the issue?

A.Change the migration port from 443 to 80.

B.Retry the migration using AWS CloudEndure instead of AWS MGN.

C.Increase the timeout value for the migration task.

D.Ensure the source server's SSL certificate is signed by a trusted Certificate Authority (CA).

AnswerD

The error explicitly states the certificate is not trusted; replacing it with a valid certificate resolves the issue.

Why this answer

The error indicates that the SSL certificate of the source server is not trusted by the AWS Migration Hub or the migration tool (e.g., AWS MGN, CloudEndure). The solution is to ensure the source server has a valid SSL certificate from a trusted CA, or configure the migration tool to ignore certificate validation if appropriate. Increasing timeout or retrying will not fix the certificate issue.

Changing port is not relevant. Using a different tool may bypass but does not address the root cause.

Practice this question →

227

MCQhard

A company is migrating a legacy e-commerce application to AWS. The application includes a web tier, an application tier, and a MySQL database. The company wants to improve scalability and reduce operational overhead. The architect plans to use Amazon RDS for MySQL and refactor the application to use Auto Scaling for the web and application tiers. However, the application currently stores session state locally on the web servers. What should the architect do to address session state management in the new architecture?

A.Store session state in Amazon S3

B.Store session state in Amazon RDS for MySQL

C.Configure an Application Load Balancer with sticky sessions

D.Use Amazon ElastiCache for Redis to store session state

AnswerD

ElastiCache provides a fast, scalable, and centralized session store.

Why this answer

Using ElastiCache for Redis provides a centralized, scalable session store that works with Auto Scaling. Using sticky sessions (ELB session stickiness) is a workaround but less scalable and not recommended for Auto Scaling. Storing sessions in RDS would add database load.

Storing in S3 is not suitable for low-latency session access.

Practice this question →

228

MCQmedium

A company is migrating a legacy application that uses a network file system (NFS) for shared storage. The application runs on Windows servers. Which AWS storage service should be used for the migration?

A.Amazon FSx for Windows File Server

B.Amazon EFS

C.Amazon EBS

D.Amazon S3

AnswerA

Provides native SMB file storage for Windows applications.

Why this answer

Amazon FSx for Windows File Server provides native SMB support, making it the ideal choice for Windows-based applications requiring shared file storage. Amazon EFS is POSIX-based and not fully compatible with Windows. Amazon EBS volumes cannot be easily shared across multiple instances.

Amazon S3 is object storage, not a file system.

Practice this question →

229

Multi-Selectmedium

A company is migrating a legacy application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to minimize changes and use a managed service. Which TWO options should the company consider? (Choose TWO.)

Select 2 answers

A.Use Amazon RDS with a custom engine.

B.Migrate the database to Amazon S3 and use S3 Select for queries.

C.Run the database on Amazon EC2 with Amazon EBS volumes.

D.Convert the database to Amazon DynamoDB.

E.Use an AWS Marketplace third-party solution that provides a managed service for the database.

AnswersC, E

EC2 allows you to install any database, providing flexibility with managed infrastructure.

Why this answer

Options C and E are correct. Option C allows running the database on EC2 with EBS, providing full control and compatibility with any database engine, minimizing changes. Option E uses an AWS Marketplace third-party solution that offers a managed service for the specific database.

Option A is incorrect because Amazon RDS does not support custom engines; it only supports specific database engines. Option B is incorrect because Amazon S3 is object storage, not a database, and S3 Select is for querying objects, not suitable as a database replacement. Option D is incorrect because DynamoDB is a NoSQL database that would require significant application changes.

Practice this question →

230

MCQhard

A company is migrating a legacy CRM application from a colocation facility to AWS. The application uses a client-server architecture with a thick client installed on employee desktops. The company wants to reduce desktop administration and provide remote access. Which migration approach should the architect recommend?

A.Deploy the thick client on Amazon WorkSpaces and provide access to employees

B.Refactor the application into a web application using AWS App Runner

C.Rehost the application on Amazon EC2 and provide VPN access to employees

D.Retire the application and use a SaaS alternative

AnswerA

WorkSpaces provides a managed virtual desktop where the thick client can run, reducing desktop administration.

Why this answer

Using Amazon WorkSpaces allows the thick client to run in a virtual desktop, providing remote access and reducing desktop management. Rehosting the application on EC2 and using a VPN does not address the thick client issue. Refactoring to a web application would require significant development.

Retiring the application is not desired.

Practice this question →

231

MCQmedium

A company is migrating a legacy application that uses SOAP web services to AWS. The application currently runs on a single on-premises server. The company wants to minimize changes and reduce operational overhead. Which approach should the company take?

A.Refactor the SOAP web services to RESTful APIs and deploy on Amazon API Gateway and AWS Lambda.

B.Containerize the application and deploy it on Amazon ECS using Fargate.

C.Rehost the application on Amazon EC2 using AWS Application Migration Service (MGN).

D.Use AWS Database Migration Service (DMS) to migrate the database and redeploy the application manually.

AnswerC

MGN automates lift-and-shift with minimal downtime.

Why this answer

Rehosting the application on Amazon EC2 using AWS Application Migration Service (MGN) minimizes changes by lifting and shifting the entire on-premises server, including the SOAP web services, to AWS with minimal modification. This approach reduces operational overhead by automating server replication and cutover, avoiding the need to refactor or containerize the application, which aligns with the requirement to minimize changes.

Exam trap

The trap here is that candidates may assume modernizing to serverless or containers is always better, but the question explicitly requires minimizing changes, making rehosting the correct choice despite its perceived lack of modernization.

How to eliminate wrong answers

Option A is wrong because refactoring SOAP web services to RESTful APIs and deploying on Amazon API Gateway and AWS Lambda introduces significant changes to the application architecture and code, contradicting the requirement to minimize changes. Option B is wrong because containerizing the application and deploying on Amazon ECS using Fargate requires modifying the application to run in containers, which adds operational complexity and changes the deployment model, increasing rather than reducing overhead. Option D is wrong because using AWS Database Migration Service (DMS) only addresses database migration, not the application itself, and manually redeploying the application does not minimize changes or reduce operational overhead compared to a fully automated rehosting solution.

Practice this question →

232

Multi-Selecthard

A company is migrating a large on-premises data lake to Amazon S3. They need to transfer petabytes of data over the network securely and efficiently. Which TWO AWS services should they use?

Select 2 answers

A.AWS Direct Connect

B.Amazon Kinesis Data Firehose

C.AWS Snowball Edge

D.AWS DataSync

E.Amazon S3 Transfer Acceleration

AnswersD, E

For online data transfer with optimization.

Why this answer

The correct answers are D (AWS DataSync) and E (Amazon S3 Transfer Acceleration). AWS DataSync is an online data transfer service that simplifies, automates, and accelerates moving data between on-premises storage and Amazon S3. Amazon S3 Transfer Acceleration enables fast, secure transfers of data over long distances by using AWS edge locations.

Option A (AWS Direct Connect) provides a dedicated network connection but is not a data transfer service itself. Option B (Amazon Kinesis Data Firehose) is for streaming data ingestion, not for large-scale batch transfers. Option C (AWS Snowball Edge) is an offline physical device, not for network-based transfer.

Practice this question →

233

Multi-Selecthard

A company is modernizing a legacy application by breaking it into microservices. The application currently uses a single relational database. The company wants to adopt a microservices architecture with separate databases per service. Which THREE patterns should the company consider? (Choose THREE.)

Select 3 answers

B.Shared Database

C.Database per Service

D.Event Sourcing

E.Command Query Responsibility Segregation (CQRS)

AnswersA, C, D

API Gateway provides a single entry point for microservices.

Why this answer

(API Gateway) is correct for routing requests to appropriate microservices. Option C (Database per Service) is correct as it aligns with the requirement for separate databases per service. Option D (Event Sourcing) is correct for maintaining data consistency across services.

Option B (Shared Database) is incorrect because it would create coupling. Option E (CQRS) is incorrect because it is a pattern for read/write separation, not a primary pattern for microservices with separate databases.

Practice this question →

234

MCQhard

A company is migrating a large-scale Hadoop cluster to Amazon EMR. They want to optimize costs by using transient clusters and storing data in Amazon S3. Which feature should they enable on the EMR cluster to improve performance?

A.Auto Scaling

B.Kerberos authentication

C.EMRFS consistent view

D.EBS-optimized instances

AnswerC

EMRFS provides consistent view and performance tuning for S3.

Why this answer

Amazon EMRFS with consistent view improves performance when using transient clusters and storing data in Amazon S3 by providing consistent metadata and read-after-write consistency. Option A (Auto Scaling) adjusts cluster size for compute needs, not storage performance. Option B (Kerberos authentication) is a security feature.

Option D (EBS-optimized instances) ensures dedicated network bandwidth for EBS volumes, which does not directly enhance S3 I/O performance.

Practice this question →

235

MCQeasy

A company is migrating a web application to AWS and wants to use a blue/green deployment strategy to minimize downtime. The application runs on EC2 instances behind an Application Load Balancer (ALB). Which approach should be used?

A.Stop the old instances, start the new instances, and update the ALB target group.

B.Use an AWS CloudFormation stack update to replace the Auto Scaling group and instances in place.

C.Create a new target group for the green environment, register the new instances, test, and then modify the ALB listener rule to forward traffic to the green target group.

D.Deploy the new instances behind a different ALB and update DNS to point to the new ALB.

AnswerC

Minimal downtime with smooth cutover.

Why this answer

Blue/green deployment involves creating a new target group for the green environment, registering the new instances, testing, and then modifying the ALB listener rule to forward traffic to the green target group. Option A is wrong because stopping old instances before starting new ones would cause downtime. Option B is wrong because an in-place update of the Auto Scaling group would cause downtime.

Option D is wrong because using a different ALB and updating DNS is not a typical blue/green deployment with ALB; it adds unnecessary complexity and may cause delays.

Practice this question →

236

MCQeasy

A company is migrating its on-premises VMware VMs to AWS using AWS MGN. After the test cutover, the migrated EC2 instance fails the health check. The source VM runs Windows Server 2016 with a static IP. What is the most likely cause?

A.The security group does not allow inbound RDP.

B.The EBS volume type is not gp3.

C.The source VM's static IP configuration was not changed to DHCP.

D.The instance type is not compatible with Windows Server 2016.

AnswerC

Static IP causes network issues in AWS.

Why this answer

When migrating a Windows VM with a static IP using AWS MGN, the source VM must be configured to use DHCP before migration, because AWS relies on DHCP for IP assignment. If the static IP configuration persists, the EC2 instance will not obtain an IP address, causing the health check to fail. Option A is incorrect because security groups do not affect DHCP-based IP assignment.

Option B is incorrect because the EBS volume type (e.g., gp3) does not impact health checks. Option D is incorrect because the instance type is not related to DHCP configuration; Windows Server 2016 is compatible with most current instance types.

Practice this question →

237

MCQhard

A company is migrating a critical application to AWS and must ensure business continuity with a Recovery Time Objective (RTO) of 1 hour and a Recovery Point Objective (RPO) of 15 minutes. The application runs on a single on-premises server with a 500 GB disk. The current data changes at a rate of 10 MB per minute. Which solution will meet the RTO and RPO requirements with the least operational overhead?

A.Use AWS Application Migration Service (AWS MGN) to replicate the server continuously and automate cutover.

B.Use AWS Database Migration Service (AWS DMS) to replicate the database continuously.

C.Use AWS DataSync to replicate the server every 15 minutes to an EBS volume.

D.Take hourly snapshots of the server using AWS Backup and restore in a new EC2 instance.

AnswerA

AWS MGN provides continuous replication, automated testing, and fast cutover, meeting both RTO and RPO with low overhead.

Why this answer

AWS Application Migration Service (AWS MGN) continuously replicates data with near-zero RPO and supports automated testing and cutover. It can achieve an RTO of less than 1 hour for a single server. AWS DMS is for database migration, not full server.

AWS Backup has a minimum RPO of 1 hour for continuous backups. Manual snapshots cannot achieve 15-minute RPO due to the rate of change and manual intervention.

Practice this question →

238

MCQeasy

A company wants to migrate its on-premises Oracle database to Amazon RDS for MySQL with minimal downtime. Which AWS service should be used for the initial data load and ongoing replication?

A.AWS Schema Conversion Tool (SCT)

B.Amazon S3

C.AWS Direct Connect

D.AWS Database Migration Service (DMS)

AnswerD

Supports ongoing replication with change data capture.

Why this answer

AWS Database Migration Service (DMS) supports both initial data load and ongoing replication from on-premises Oracle to Amazon RDS for MySQL with minimal downtime. Option A (AWS SCT) is used for schema conversion, not data migration. Option B (Amazon S3) is a storage service, not a migration service.

Option C (AWS Direct Connect) provides network connectivity but does not perform data migration.

Practice this question →

239

MCQmedium

A company is migrating a web application to AWS. The application uses a three-tier architecture with a web server, application server, and MySQL database. The company wants to ensure high availability by deploying across multiple Availability Zones. The web and application servers are stateless. Which solution provides the HIGHEST availability with the LEAST administrative effort?

A.Deploy web and application servers on EC2 instances in an Auto Scaling group across two AZs with an Application Load Balancer. Use Multi-AZ Amazon RDS for MySQL.

B.Deploy web and application servers on EC2 instances in an Auto Scaling group in one AZ. Use Amazon Route 53 latency-based routing to another region.

C.Deploy web, application, and database on a single large EC2 instance in one AZ. Take snapshots every hour.

D.Deploy web and application servers on EC2 instances in two AZs with Elastic IP addresses. Use Amazon Route 53 with health checks to route traffic.

AnswerA

ALB and Auto Scaling provide automatic scaling and failover; Multi-AZ RDS provides database failover.

Why this answer

Deploying web and application servers on EC2 instances in an Auto Scaling group across two AZs with an Application Load Balancer ensures high availability and automatic scaling. Multi-AZ Amazon RDS for MySQL provides automatic failover for the database, minimizing administrative effort. Option B (deploying in one AZ) does not provide high availability across AZs.

Option C (single large instance) is a single point of failure. Option D (using Elastic IPs and Route 53 health checks) requires manual intervention and is less automated than the ALB solution.

Practice this question →

240

MCQmedium

A company is migrating a critical application from on-premises to AWS. The application uses a shared file system for user uploads and logs. The company wants a highly available, durable, and low-latency solution. Which AWS storage service should the company use?

A.Amazon EFS

B.Amazon EBS

C.Amazon FSx for Windows File Server

D.Amazon S3

AnswerA

EFS provides a scalable, highly available NFS file system.

Why this answer

Amazon EFS provides a shared NFS file system with high availability and durability, making it suitable for user uploads and logs. Option B (Amazon EBS) is block storage and not shared across instances. Option C (Amazon FSx for Windows File Server) is designed for Windows workloads and not ideal for general Linux-based applications.

Option D (Amazon S3) is object storage, not a shared file system.

Practice this question →

241

MCQmedium

A company is migrating a multi-tier web application to AWS. The application includes an Apache web server and a MySQL database. The operations team needs to scale the web tier based on CPU utilization while maintaining a static IP for the database. Which combination of AWS services should the solutions architect use?

A.Auto Scaling group for web tier with a Network Load Balancer; Amazon RDS for MySQL database with a static Elastic IP

B.Auto Scaling group for web tier with an Application Load Balancer; Amazon EC2 instance for MySQL database with an Elastic IP

C.Auto Scaling group for web tier with an Application Load Balancer; Amazon RDS for MySQL database with a static Elastic IP

D.Auto Scaling group for web tier with a Classic Load Balancer; Amazon EC2 instance for MySQL database with an Elastic IP

AnswerB

Correct: ALB for web scaling, EC2 with Elastic IP for static database IP.

Why this answer

An Auto Scaling group with an Application Load Balancer provides scaling for web servers. An Elastic IP on an EC2 instance provides a static IP for the database. RDS does not support Elastic IP directly.

Practice this question →

242

MCQmedium

A company is migrating a stateful web application to AWS. The application currently runs on a single on-premises server and uses local storage for session data. The company wants to make the application highly available and scalable. What should the solutions architect do?

A.Store session data in a Multi-AZ Amazon RDS database and use Route 53 with health checks

B.Use an Application Load Balancer with sticky sessions and an Auto Scaling group

C.Use a larger EC2 instance to handle all traffic and take regular snapshots

D.Migrate session data to Amazon ElastiCache or DynamoDB, then use an Auto Scaling group behind an ALB

AnswerD

Correct: Makes the web tier stateless, allowing scaling and high availability.

Why this answer

Moving session state to ElastiCache or DynamoDB makes the application stateless, enabling Auto Scaling. Sticky sessions on an ALB are a workaround but do not provide full statelessness. Using a larger instance does not provide high availability.

Multi-AZ RDS for session data is not ideal for high-frequency session access.

Practice this question →

243

Multi-Selectmedium

A company is migrating a legacy application to AWS and wants to use a containerized architecture. The application requires persistent storage that can be shared across multiple containers in an Amazon ECS cluster. Which TWO storage solutions should the company consider? (Choose TWO.)

Select 2 answers

A.Amazon Simple Storage Service (S3)

B.Amazon Elastic File System (EFS)

C.Amazon FSx for Lustre

D.Amazon Elastic Block Store (EBS)

E.Amazon Relational Database Service (RDS)

AnswersB, C

EFS is a shared NFS file system that can be mounted by multiple containers.

Why this answer

Amazon EFS provides a fully managed NFS file system that can be mounted by multiple Amazon ECS tasks across multiple availability zones, making it ideal for shared persistent storage. Amazon FSx for Lustre is a high-performance file system optimized for workloads such as machine learning and high-performance computing, and it also supports concurrent access from multiple ECS tasks. In contrast, Amazon EBS volumes are block-level storage that can only be attached to a single EC2 instance, so they cannot be shared across multiple containers unless using a cluster-aware file system like EFS.

Amazon S3 is object storage and does not provide a POSIX-compatible file system interface required by many legacy applications. Amazon RDS is a managed database service, not a shared storage solution.

Practice this question →

244

MCQeasy

A company plans to modernize an existing .NET Framework 4.7 application running on Windows Server 2012 R2. The company wants to move to a containerized architecture on AWS with minimal code changes. Which service should the company use to meet these requirements?

A.AWS App2Container (A2C)

B.AWS Serverless Application Model (SAM)

C.AWS Copilot

D.AWS Migration Hub

AnswerA

A2C analyzes and containerizes .NET applications with minimal code changes.

Why this answer

AWS App2Container (A2C) is specifically designed to containerize existing .NET Framework applications running on Windows Server with minimal code changes. It analyzes the application, generates Docker images, and produces CloudFormation templates for deployment on Amazon ECS or EKS, directly meeting the requirement to modernize a .NET Framework 4.7 application to a containerized architecture without significant refactoring.

Exam trap

The trap here is that candidates may confuse AWS App2Container with AWS Copilot or SAM, assuming any AWS container tool can handle existing .NET Framework applications, but only A2C provides the automated analysis and containerization of legacy Windows applications with minimal code changes.

How to eliminate wrong answers

Option B (AWS SAM) is wrong because it is a framework for building serverless applications using AWS Lambda and API Gateway, not for containerizing existing .NET Framework applications; it requires rewriting the application into a serverless architecture, which contradicts the 'minimal code changes' requirement. Option C (AWS Copilot) is wrong because it is a CLI tool for deploying containerized applications on Amazon ECS or App Runner, but it assumes the application is already containerized and does not provide analysis or containerization of existing .NET Framework binaries. Option D (AWS Migration Hub) is wrong because it is a tracking and monitoring service for migration progress across multiple tools, not a tool that performs containerization or code transformation.

Practice this question →

245

MCQhard

A company is using AWS DMS to migrate a SQL Server database to Amazon Redshift. The initial full load completed, but the ongoing replication task failed with the error shown. What is the MOST likely cause?

A.The DMS task is not configured to use a task log for troubleshooting.

B.The source SQL Server transaction log has not been backed up or truncated, causing it to become full.

C.The target Redshift table does not have a primary key defined for the DMS task to apply changes.

D.The DMS task is using a full LOB mode, which is not supported for Redshift targets.

AnswerB

CDC reads the transaction log; if it fills up, DMS cannot continue. Regular log backups or truncation are needed.

Why this answer

The error indicates that AWS DMS cannot read the source SQL Server transaction log to capture ongoing changes. This typically occurs when the transaction log is full because it has not been backed up or truncated, preventing DMS from reading new log records for continuous replication. DMS relies on the source database's transaction log for CDC (Change Data Capture), and a full log blocks this process.

Exam trap

The trap here is that candidates may confuse a target-side issue (like missing primary key or unsupported LOB mode) with a source-side transaction log problem, because the error message explicitly mentions 'transaction log' but test-takers often overlook the source database context.

How to eliminate wrong answers

Option A is wrong because the task log is used for debugging and monitoring, but its absence does not cause the replication task to fail with a transaction log error; the error message specifically points to a log read issue, not a missing log configuration. Option C is wrong because while a primary key is recommended for target tables in DMS tasks to support ongoing replication, its absence would cause a different error (e.g., 'No primary key defined') and not a transaction log failure. Option D is wrong because full LOB mode is supported for Redshift targets in DMS; the error is unrelated to LOB handling and instead points to a source-side transaction log problem.

Practice this question →

246

MCQmedium

A company is setting up AWS DMS to migrate a database. The trust policy above is attached to the IAM role used by DMS. When testing the connection, DMS reports an authentication error. What is the most likely cause?

A.The trust policy is missing a condition for the DMS replication instance.

B.The service principal should be dms.amazonaws.com, but it is misspelled.

C.The trust policy is missing a region-specific condition.

D.The trust policy is correct, but the permissions policy attached to the role does not allow DMS to perform the necessary actions on the source and target databases.

AnswerD

The trust policy allows DMS to assume the role, but the role's permissions policy must grant access to the databases.

Why this answer

The trust policy is correctly configured to allow the DMS service principal (dms.amazonaws.com) to assume the role, as required. However, an authentication error during connection testing typically indicates that DMS cannot successfully assume the role or that the assumed role lacks the necessary permissions to interact with the source or target databases. Since the trust policy is correct, the most likely cause is that the permissions policy attached to the role does not grant DMS the required actions (e.g., dms:TestConnection, dms:CreateEndpoint) on the database resources.

Option D correctly identifies this as the issue.

Practice this question →

247

MCQhard

A company is migrating a legacy .NET application to AWS. The application uses Windows authentication and has a dependency on a local file system. The company wants to minimize code changes. Which combination of services should be used?

A.Amazon EC2 Windows instances with Amazon EFS

B.AWS Elastic Beanstalk with Amazon EFS

C.Amazon Lightsail with local instance storage

D.Amazon EC2 Windows instances with Amazon FSx for Windows File Server

AnswerD

Provides native Windows environment and SMB file sharing with minimal changes.

Why this answer

Amazon EC2 Windows instances provide a native Windows environment, and Amazon FSx for Windows File Server offers fully managed Windows file shares that support SMB protocol, Windows authentication, and NTFS file system. This combination minimizes code changes by preserving the existing Windows authentication and local file system dependencies. Option A is incorrect because Amazon EFS uses NFS and does not natively support Windows SMB.

Option B is incorrect because AWS Elastic Beanstalk for Windows may complicate Windows authentication and lacks the flexibility for direct file system access. Option C is incorrect because Amazon Lightsail with local instance storage does not provide shared file storage and may not scale as needed.

Practice this question →

248

Multi-Selecthard

A company is migrating a monolithic application to a microservices architecture on Amazon ECS. The application uses a shared MySQL database. Which THREE strategies should the company use to modernize the data layer?

Select 3 answers

A.Migrate all data to Amazon DynamoDB.

B.Use database per service pattern.

C.Keep a single RDS instance with multiple schemas.

D.Use Amazon RDS read replicas to offload read queries.

E.Implement CQRS and event sourcing.

AnswersB, D, E

Each microservice gets its own database.

Why this answer

(database per service pattern) is correct because it aligns with microservices principles by giving each service its own database, enabling independent scaling and deployment. Option D (read replicas) is correct for offloading read queries from the primary database, improving performance for read-heavy workloads. Option E (CQRS and event sourcing) is correct for separating read and write operations and maintaining an event log, which helps in decomposing the monolith and ensuring eventual consistency.

Option A is wrong because Amazon DynamoDB may not be suitable for all relational data and migrating all data to NoSQL is not always appropriate. Option C is wrong because keeping a single RDS instance with multiple schemas does not fully decouple the data layer and still creates a single point of failure and coupling.

Practice this question →

249

MCQhard

A company is migrating a critical 3-tier application to AWS. The application consists of a web tier, an application tier, and a PostgreSQL database. The web and application tiers are stateless and run on Linux. The company has deployed the web tier on EC2 instances behind an Application Load Balancer (ALB) across two Availability Zones. The application tier is deployed on EC2 instances in an Auto Scaling group across two Availability Zones. The PostgreSQL database is migrated to Amazon RDS for PostgreSQL with Multi-AZ deployment. The application uses sticky sessions (session affinity) to maintain user sessions on the web tier. After migration, users report that they are frequently logged out and lose session data. The web tier logs show that requests are being routed to different web instances. What is the MOST likely cause of this issue?

A.The target group for the web tier does not have sticky sessions (session affinity) enabled

B.The ALB is configured to disable cross-zone load balancing, causing uneven traffic distribution

C.The idle timeout of the ALB is set too low, causing sessions to expire

D.The web tier should use a Network Load Balancer (NLB) instead of an ALB for sticky sessions

AnswerA

Sticky sessions ensure requests from a user are routed to the same instance; without it, subsequent requests may go to different instances, losing session data.

Why this answer

The issue is that users are losing session data because requests are being routed to different web instances. Sticky sessions (session affinity) must be enabled on the target group of the ALB to ensure that all requests from a user's session are sent to the same web instance. Without sticky sessions, the ALB distributes requests across all healthy targets, causing session data to be lost if not shared.

Option A is correct because the target group needs sticky sessions enabled. Option B (disable cross-zone load balancing) would not cause this issue; it would affect traffic distribution across AZs but not session persistence. Option C (idle timeout) would cause sessions to expire after a period of inactivity, not immediate logout.

Option D (using NLB) is not necessary as ALB supports sticky sessions natively.

Practice this question →

250

MCQeasy

A company is planning a hybrid cloud migration and needs to establish a dedicated network connection between its on-premises data center and AWS with consistent low latency. Which AWS service should be used?

A.AWS Direct Connect

B.AWS Client VPN

C.AWS Transit Gateway

D.AWS Site-to-Site VPN

AnswerA

Dedicated, low-latency connection.

Why this answer

AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, offering consistent low latency. Option A is correct for this reason. Option B (AWS Client VPN) is incorrect because it is designed for individual remote clients, not a dedicated connection.

Option C (AWS Transit Gateway) is incorrect as it is a hub for connecting networks, not a direct connection method. Option D (AWS Site-to-Site VPN) is incorrect because it uses the public internet and does not provide dedicated bandwidth or consistent low latency.

Practice this question →

251

MCQmedium

A company is migrating a .NET application from Windows Server to AWS. The application uses Microsoft SQL Server. The company wants to reduce licensing costs and minimize operational overhead. Which migration strategy should be recommended?

A.Replatform to Amazon RDS for SQL Server

B.Refactor the application to .NET Core on Amazon Linux

C.Replatform to Amazon RDS for PostgreSQL

D.Rehost to Amazon EC2 with SQL Server on Windows

AnswerC

PostgreSQL is open-source, eliminating SQL Server licensing costs, and RDS reduces operational overhead.

Why this answer

(Replatform to Amazon RDS for PostgreSQL) is the best choice because it replaces SQL Server with PostgreSQL, which is open-source, thus eliminating SQL Server licensing costs. RDS also reduces operational overhead by managing the database. Option A (Replatform to Amazon RDS for SQL Server) reduces overhead but still incurs SQL Server licensing costs.

Option B (Refactor to .NET Core on Amazon Linux) would require significant application changes and does not directly address database licensing. Option D (Rehost to Amazon EC2 with SQL Server on Windows) maintains high licensing costs and operational overhead.

Practice this question →

252

MCQmedium

An IAM policy is attached to a role used by AWS DMS for a database migration from an RDS MySQL instance to an S3 bucket. The migration fails with an access denied error when writing to S3. Which missing permission is the most likely cause?

A.kms:Decrypt

B.rds:DescribeDBInstances

C.dms:StartReplicationTask

D.s3:PutObject

AnswerD

DMS needs s3:PutObject to write data to the S3 bucket.

Why this answer

The policy allows s3:GetObject and s3:ListBucket, but not s3:PutObject, which is required for writing data to S3. The error is about writing, not reading. dms:StartReplicationTask is already allowed. rds:DescribeDBInstances is for reading RDS metadata. kms:Decrypt is only needed for encrypted buckets.

Practice this question →

253

MCQeasy

A company is migrating a monolithic application to AWS. The application currently runs on a single on-premises server and uses a local MySQL database. To reduce migration risk, the company wants to minimize application code changes. Which AWS service should the company use to migrate the database with minimal application modification?

A.Amazon RDS for MySQL

B.AWS Database Migration Service (AWS DMS)

C.AWS Snowball

D.Amazon S3

AnswerB

AWS DMS can migrate databases with minimal downtime and supports homogeneous migrations, reducing code changes.

Why this answer

AWS Database Migration Service (AWS DMS) is the correct choice because it supports homogeneous migrations of MySQL databases with minimal application changes. DMS can migrate data from an on-premises MySQL database to Amazon RDS for MySQL or Amazon Aurora while keeping the application largely unchanged. Option A (Amazon RDS for MySQL) is not a migration service; it is the target database service that requires manual import or use of DMS.

Option C (AWS Snowball) is designed for large-scale offline data transfers, not for live database migrations. Option D (Amazon S3) is an object storage service and cannot be used to migrate a relational database directly.

Practice this question →

254

MCQmedium

A company is migrating a legacy on-premises application to AWS. The application uses a shared file system for user home directories. Which AWS service should the company use to minimize changes to the application while providing scalable, highly available file storage?

A.Amazon FSx for Lustre

B.Amazon EBS

C.Amazon S3

D.Amazon EFS

AnswerD

Amazon EFS provides a scalable NFS file system that can be shared across EC2 instances, minimizing changes.

Why this answer

(Amazon EFS) is correct because it provides a scalable, fully managed NFS file system that can be mounted by multiple EC2 instances, minimizing application changes. Option A (FSx for Lustre) is for high-performance computing, not general file sharing. Option B (EBS) is block storage attached to a single instance.

Option C (S3) is object storage, not a file system.

Practice this question →

255

MCQmedium

A company is migrating a legacy on-premises application to AWS. The application requires a relational database with Oracle compatibility and the ability to run read replicas across multiple Availability Zones. Which AWS service should the company use to minimize migration effort?

A.Amazon RDS for MySQL

B.Amazon EC2 with self-managed Oracle

C.Amazon DynamoDB

D.Amazon RDS for Oracle

AnswerD

RDS for Oracle offers managed Oracle database with read replicas across AZs.

Why this answer

Amazon RDS for Oracle provides a managed Oracle database with Oracle compatibility and supports read replicas across multiple Availability Zones, minimizing migration effort. Option A is wrong because Amazon RDS for MySQL does not offer Oracle compatibility. Option B is wrong because Amazon EC2 with self-managed Oracle requires more operational overhead.

Option C is wrong because Amazon DynamoDB is a NoSQL database, not relational.

Practice this question →

256

MCQhard

A company is migrating a large-scale data analytics workload from on-premises to AWS. The workload uses Apache Spark to process terabytes of data daily. The company wants to use Amazon EMR for the migration. The current on-premises cluster has 20 nodes, each with 64 vCPUs and 256 GB of RAM. The data is stored in HDFS on the cluster. The company wants to minimize costs while maintaining performance. The data sources are in Amazon S3 and on-premises. The company has set up a dedicated AWS Direct Connect connection. Which EMR configuration should the company use?

A.Use EMR with EC2 instances of similar size (e.g., r5.8xlarge) and store data in Amazon S3 using EMRFS.

B.Use EMR with Graviton-based instances and store intermediate data in HDFS on EBS volumes.

C.Use EMR with a mix of On-Demand and Spot Instances, and use S3 for all data storage.

D.Use AWS Glue to run the Spark jobs with the same resource configuration.

AnswerA

Correct. Using EMR with r5.8xlarge instances closely matches the on-premises resources (64 vCPUs, 256 GB RAM per node) and using S3 with EMRFS eliminates HDFS overhead, reducing costs and management effort while maintaining performance via Direct Connect.

Why this answer

It directly maps the on-premises cluster capacity to equivalent EC2 instances (r5.8xlarge provides 32 vCPUs and 256 GB RAM, so two per node would match the 64 vCPUs and 256 GB RAM). Storing data in S3 via EMRFS eliminates HDFS management and leverages S3 durability and scalability. This configuration minimizes costs by avoiding over-provisioning and using S3 for cost-effective storage, while maintaining performance through Direct Connect for data transfer.

Using EMR with similar instance sizes ensures the Spark jobs run efficiently without reconfiguration. Other options introduce unnecessary complexity or higher costs: Option B uses Graviton-based instances which may require code changes, and storing intermediate data on EBS volumes incurs additional costs and management overhead. Option C mixes On-Demand and Spot Instances, which can reduce costs but still requires cluster management and does not align with the goal of minimizing costs while maintaining performance as effectively as option A.

Option D uses AWS Glue, which is a fully managed service but may not provide the same level of control or performance for large-scale workloads; it may also be more expensive for sustained high-volume processing compared to EMR with reserved capacity.

Practice this question →

257

MCQhard

A company is migrating a 10 TB Oracle database to Amazon RDS for Oracle. The migration must have minimal downtime. The source database is running on-premises with limited bandwidth (50 Mbps). Which strategy should be used?

A.Use AWS Snowball to transfer a full backup, then manually apply transaction logs.

B.Set up a VPN connection and use Oracle GoldenGate for replication.

C.Use AWS Database Migration Service (DMS) with a full load and ongoing change data capture (CDC).

D.Export the database to flat files, upload to Amazon S3, and import into RDS.

AnswerC

DMS with CDC allows minimal downtime by replicating changes after initial load.

Why this answer

AWS Database Migration Service (DMS) with a full load and ongoing change data capture (CDC) minimizes downtime by continuously replicating changes from the source Oracle database to Amazon RDS for Oracle during the full load. After the full load completes, changes are applied to keep the target in sync, allowing a very brief cutover window. Over a 50 Mbps link, the initial 10 TB full load may take days, but CDC ensures minimal downtime at cutover.

Option A (Snowball) is an offline method that requires exporting, shipping, and importing the database, which introduces significant downtime. Option B (Oracle GoldenGate) is a valid replication tool but adds complexity and cost; DMS is a managed service better integrated with AWS. Option D (export to flat files and import) requires taking the database offline for the export and import, causing substantial downtime.

Practice this question →

258

Multi-Selecthard

A company is migrating a large e-commerce platform to AWS using a lift-and-shift approach. The application consists of a web tier, application tier, and a MySQL database. After migration, users report intermittent slow page loads. The operations team notices high CPU utilization on the application tier instances. Which THREE steps should the team take to address the performance issues?

Select 3 answers

A.Implement Amazon CloudFront to cache static content and reduce load on the web tier.

B.Create an Amazon RDS read replica for the MySQL database and route read queries to it.

C.Replace the current application tier instances with larger instance types.

D.Move the MySQL database to Amazon RDS for MySQL and enable Multi-AZ deployment.

E.Configure an Auto Scaling group for the application tier to scale based on CPU utilization.

AnswersA, B, E

Reduces requests to the origin servers.

Why this answer

Implementing Amazon CloudFront to cache static content offloads requests from the web tier, reducing the number of dynamic requests that reach the application tier. This directly lowers CPU utilization on the application instances by minimizing the processing overhead for repeated static asset deliveries.

Exam trap

The trap here is that candidates often confuse database-level solutions (like Multi-AZ or read replicas) with application-tier CPU issues, or they default to vertical scaling (larger instances) instead of recognizing the need for horizontal scaling and content caching.

Practice this question →

259

Multi-Selecteasy

A company wants to migrate a legacy .NET application to AWS. The application uses Windows authentication and requires a shared file system. Which TWO AWS services should the company use to modernize this application? (Choose two.)

Select 2 answers

A.Amazon FSx for Windows File Server

B.AWS Elastic Beanstalk

C.Amazon S3

D.Amazon EBS

E.AWS Lambda

AnswersA, B

Managed SMB file share.

Why this answer

Options A and B are correct. Amazon FSx for Windows File Server (A) provides a native Windows file system with SMB support, ideal for shared file storage in .NET applications that require Windows authentication. AWS Elastic Beanstalk (B) offers a managed environment for .NET applications, simplifying deployment and scaling.

Option C (Amazon S3) is object storage, not a shared file system. Option D (Amazon EBS) is block storage and cannot be shared across multiple instances. Option E (AWS Lambda) does not support .NET Framework natively and is not suitable for this use case.

Practice this question →

260

Multi-Selectmedium

A company is migrating a web application to AWS and wants to modernize it by using a microservices architecture. Which TWO AWS services should the company use to implement service discovery and API gateway functionality?

Select 2 answers

A.Amazon Route 53

B.AWS App Mesh

C.Amazon API Gateway

D.Elastic Load Balancing (ELB)

E.AWS Cloud Map

AnswersC, E

API Gateway provides API management and gateway functionality.

Why this answer

(Amazon API Gateway) provides API gateway functionality for managing, securing, and publishing APIs. Option E (AWS Cloud Map) provides service discovery for microservices. Option A (Route 53) is a DNS service, not specialized for service discovery or API gateway.

Option B (App Mesh) provides a service mesh for observability and traffic control, not API gateway. Option D (ELB) handles load balancing, not service discovery or API gateway.

Practice this question →

261

MCQmedium

A company is migrating a stateful application that uses local storage on EC2. They want to modernize to a stateless architecture using Amazon EFS for shared storage. What is the best approach to migrate the existing data?

A.Use AWS Fsx for Lustre with S3 as data repository

B.Copy data from local storage to EFS using AWS DataSync during a maintenance window

C.Detach the EBS volume and attach it to the new EC2 instance

D.Create an EBS snapshot and restore it on the new instance

AnswerB

DataSync efficiently copies data to EFS, enabling a stateless architecture.

Why this answer

The best approach is to use AWS DataSync to copy data from the local EC2 instance storage to Amazon EFS during a maintenance window, then reconfigure the application to use EFS as shared storage. Option A (AWS FSx for Lustre with S3) is overcomplicated and not appropriate for a simple shared file system migration to EFS. Option C (detach EBS volume and attach to new instance) is not stateless and does not enable shared access.

Option D (EBS snapshot restore) retains the stateful nature and does not provide shared storage.

Practice this question →

262

MCQeasy

A company is moving its application from on-premises to AWS. They want to use the same third-party software licenses on AWS. Which AWS purchasing option allows them to bring their own licenses?

A.Savings Plans

B.Dedicated Hosts

C.Spot Instances

D.Reserved Instances

AnswerB

Allows you to use existing licenses per socket/core.

Why this answer

(Dedicated Hosts) is correct because it provides visibility and control over physical servers, allowing you to use your own licenses per socket/core. Option A (Savings Plans) is just a billing discount. Option C (Spot Instances) are interruptible.

Option D (Reserved Instances) is also a billing discount and does not provide the license flexibility of Dedicated Hosts.

Practice this question →

263

MCQeasy

A company wants to modernize a legacy monolithic application by decomposing it into microservices. The application handles HTTP requests and uses a MySQL database. The company needs to decouple the microservices and improve scalability. Which AWS services should be used?

A.Amazon SQS for decoupling and Amazon Aurora MySQL for data.

B.Amazon S3 for decoupling and Amazon RDS for MySQL.

C.Amazon SQS for decoupling and Amazon DynamoDB for data.

D.Amazon Kinesis Data Streams for decoupling and Amazon RDS for MySQL.

AnswerA

SQS provides message queuing for decoupling; Aurora is MySQL-compatible and scalable.

Why this answer

Amazon SQS provides a reliable message queue for decoupling microservices, and Amazon Aurora MySQL offers a scalable, MySQL-compatible database for persistent data. Option B (S3) is incorrect because S3 is an object storage service, not a decoupling mechanism. Option C (DynamoDB) is incorrect because although SQS for decoupling is fine, DynamoDB is a NoSQL database, not a relational database like MySQL, and the question specifies MySQL.

Option D (Kinesis Data Streams) is incorrect because Kinesis is designed for real-time data streaming, not for general-purpose decoupling of microservices.

Practice this question →

264

Multi-Selecteasy

A company is migrating a web application to AWS and wants to use a microservices architecture. The application needs to communicate synchronously via REST APIs. Which TWO AWS services should the architect consider for implementing API communication?

Select 2 answers

A.Application Load Balancer

B.AWS Step Functions

C.Amazon API Gateway

D.AWS AppSync

E.Amazon Simple Queue Service (Amazon SQS)

AnswersA, C

ALB can route HTTP requests to different microservices based on paths.

Why this answer

Amazon API Gateway is a fully managed service for creating RESTful APIs. AWS AppSync is for GraphQL. For internal microservice communication, API Gateway is suitable.

Application Load Balancer can also route HTTP traffic to multiple services. NLB is for TCP/UDP. SQS is asynchronous.

Step Functions orchestrate workflows.

Practice this question →

265

MCQmedium

A company is migrating a large-scale data warehouse from on-premises to Amazon Redshift. The current on-premises solution uses a proprietary columnar storage format. The company needs to minimize data transformation effort. Which approach should the company take?

A.Use the Amazon Redshift COPY command to load data directly from the on-premises storage.

B.Use AWS Glue to convert the proprietary format to Apache Parquet and load into Amazon Redshift.

C.Use AWS Database Migration Service (DMS) to migrate the data directly to Redshift.

D.Use Amazon Kinesis Data Firehose to stream the data to Redshift.

AnswerB

AWS Glue can transform data into columnar formats optimized for Redshift.

Why this answer

AWS Glue can crawl the proprietary columnar storage format and convert it to Apache Parquet, a columnar format efficiently loaded into Amazon Redshift via COPY from S3, minimizing data transformation effort. Option A is incorrect because the COPY command cannot directly load from on-premises storage; data must first be staged in Amazon S3 in a supported format. Option C is incorrect because AWS DMS is designed for migrating relational databases, not proprietary file formats.

Option D is incorrect because Amazon Kinesis Data Firehose is for streaming real-time data, not batch migration of existing large-scale data.

Practice this question →

266

MCQhard

A company is modernizing a legacy application by breaking it into microservices. The application uses a shared MySQL database. The team wants to refactor the database to use Amazon DynamoDB for better scalability. Which migration strategy should be used?

A.Rehost the database to Amazon RDS

B.Use the Strangler Fig pattern to incrementally migrate data to DynamoDB

C.Replatform the database to Amazon Aurora

D.Retire the existing database and switch to DynamoDB

AnswerB

Allows gradual transition with minimal risk.

Why this answer

The Strangler Fig pattern is the correct migration strategy because it allows for incremental and iterative migration of data and business logic from the legacy MySQL database to Amazon DynamoDB without a full cutover. This approach minimizes risk and enables the team to gradually refactor the application while maintaining continuous operation. Option A (rehost to Amazon RDS) would still use a relational database and not achieve the goal of moving to DynamoDB.

Option C (replatform to Amazon Aurora) also retains a relational model. Option D (retire the existing database and switch to DynamoDB) is risky as it requires a complete cutover without incremental transition.

Practice this question →

267

Multi-Selectmedium

A company is migrating a legacy e-commerce platform to AWS. The platform includes a MySQL database that experiences heavy read traffic. The company wants to improve performance and reduce latency for read operations. Which TWO actions should the solutions architect take?

Select 2 answers

A.Enable Multi-AZ on the RDS instance.

B.Shard the database across multiple RDS instances.

C.Upgrade to Provisioned IOPS for the database.

D.Add read replicas to the RDS MySQL database.

E.Use Amazon ElastiCache in front of the database.

AnswersD, E

Read replicas reduce load on the primary and improve read latency.

Why this answer

Adding read replicas offloads read traffic from the primary database, improving performance. Implementing Amazon ElastiCache for caching reduces database load for frequently accessed data. Multi-AZ is for high availability, not read performance.

Provisioned IOPS improves write performance. Sharding adds complexity and may not be necessary.

Practice this question →

268

MCQhard

A company is migrating a distributed application that uses a custom TCP protocol between components. The application is deployed on-premises across multiple servers. The company wants to use AWS without modifying the application code. Which approach should the company take to migrate the application while maintaining low latency between components?

A.Use Amazon EC2 instances in a Placement Group within a single VPC to ensure low latency.

B.Use AWS Direct Connect to connect the on-premises servers to AWS and keep the application on-premises.

C.Use VPC Peering to connect the application components across different VPCs.

D.Use a VPN connection between the on-premises environment and AWS VPC.

AnswerA

Placement Groups provide low latency and high throughput, and EC2 allows running the application unchanged.

Why this answer

Using a Placement Group ensures that EC2 instances are placed close together within the same Availability Zone, minimizing network latency and maximizing throughput for the custom TCP protocol. This allows the application to run unchanged on AWS. Option B is incorrect because Direct Connect connects on-premises to AWS, but the application components would still be separated by network distance, increasing latency.

Option C is incorrect because VPC Peering connects different VPCs, which does not guarantee low latency within a single VPC. Option D is incorrect because a VPN is used for secure connectivity over the internet, which introduces higher latency and is not necessary for components within the same VPC.

Practice this question →

269

MCQmedium

A company is migrating a legacy .NET application to AWS. The application currently runs on Windows Server and uses a SQL Server database. The company wants to minimize licensing costs and operational overhead. Which migration strategy should the company use?

A.Replatform using Docker containers on Amazon ECS with Windows containers.

B.Rehost the application on Amazon EC2 Windows instances with SQL Server using License Mobility.

C.Replatform the application by moving the database to Amazon RDS for SQL Server and the application to Elastic Beanstalk.

D.Refactor the application to .NET Core and deploy on Amazon Linux with SQL Server.

AnswerB

Rehosting minimizes changes and can leverage existing licenses through License Mobility.

Why this answer

Rehost the application on Amazon EC2 Windows instances with SQL Server using License Mobility. This approach minimizes licensing costs by allowing the company to bring existing SQL Server licenses to AWS via License Mobility, avoiding new license purchases. It also minimizes operational overhead by requiring no application code changes.

Option A is incorrect because replatforming to Docker containers on ECS with Windows containers adds complexity and may require modifications to the legacy application. Option C is incorrect because moving the database to Amazon RDS for SQL Server reduces operational overhead but licensing costs depend on the license model and may not be minimal. Option D is incorrect because refactoring to .NET Core on Linux requires significant rework, increasing cost and operational overhead.

Practice this question →

270

MCQhard

A company is migrating a legacy mainframe application to AWS. The application uses a hierarchical database (IMS) and has complex batch processing jobs. The company wants to minimize changes to the application code. Which approach should be taken?

A.Rehost the application on AWS Mainframe Modernization using Blu Age

B.Replace the application with a SaaS-based ERP system

C.Re-platform the database to Amazon RDS for PostgreSQL

D.Refactor the application to use microservices on Amazon EKS

AnswerA

Minimizes code changes by rehosting mainframe workloads.

Why this answer

AWS Mainframe Modernization with Blu Age allows rehosting legacy mainframe applications with minimal code changes, preserving the existing IMS database and batch processing logic. Option D is incorrect because refactoring to microservices on EKS would require significant code changes. Option B is incorrect because replacing with a SaaS ERP introduces a completely different application.

Option C is incorrect because replatforming the database to RDS still requires changes to adapt the hierarchical IMS to relational.

Practice this question →

271

MCQeasy

An organization is planning to migrate a large number of on-premises virtual machines to AWS. The migration must be automated and support replication of live workloads with minimal downtime. Which AWS service is best suited for this task?

A.AWS DataSync

B.AWS Application Migration Service (MGN)

C.AWS Server Migration Service (SMS)

D.AWS Database Migration Service (DMS)

AnswerB

MGN automates lift-and-shift migration with continuous replication and minimal downtime.

Why this answer

(AWS Application Migration Service) is correct as it automates lift-and-shift migration with continuous replication and cutover. Option A (AWS DataSync) is for data transfer, not live VM replication. Option C (AWS Server Migration Service) is legacy and less capable.

Option D (AWS Database Migration Service) is for databases, not general VM migration.

Practice this question →

272

MCQmedium

A company is migrating a multi-tier web application to AWS. The application uses a commercial database that requires a license. The company wants to reduce licensing costs. Which migration strategy should be considered?

A.Rehost the database to EC2 with the same database software

B.Replatform the database to Amazon RDS for an open-source engine like PostgreSQL

C.Repurchase a Software as a Service (SaaS) alternative

D.Refactor the application to use Amazon DynamoDB

AnswerB

Eliminates commercial license costs, minimal changes.

Why this answer

(Replatform the database to Amazon RDS for an open-source engine like PostgreSQL) is correct because migrating to an open-source database on Amazon RDS eliminates the need for commercial licenses, thereby reducing licensing costs. Option A (Rehost) is incorrect because it retains the same commercial database software, so licensing costs remain. Option C (Repurchase to SaaS) may not be applicable or cost-effective for the database.

Option D (Refactor to DynamoDB) typically requires significant application changes and may not align with a license cost reduction goal.

Practice this question →

273

MCQeasy

A company is migrating a web application to AWS and wants to decouple the frontend and backend tiers to improve scalability. The frontend runs on Amazon EC2 behind an Application Load Balancer (ALB). The backend processes orders asynchronously. Which service should the company use to decouple the tiers?

A.Amazon MQ

B.Amazon Simple Queue Service (SQS)

C.Amazon Simple Notification Service (SNS)

D.Amazon Kinesis Data Streams

AnswerB

SQS provides a fully managed message queue for asynchronous processing.

Why this answer

For decoupling frontend and backend asynchronously, Amazon Simple Queue Service (SQS) is the appropriate service. It allows the frontend to send order messages to a queue, and the backend components poll and process them independently. Option A (Amazon MQ) is a managed message broker for existing protocols like JMS, but SQS is simpler and more scalable for this use case.

Option C (Amazon SNS) is a pub/sub service, not designed for point-to-point decoupling with pull-based consumers. Option D (Amazon Kinesis Data Streams) is for real-time streaming data, not for decoupling web tiers.

Practice this question →

274

MCQeasy

A company wants to migrate 500 TB of data from an on-premises data center to Amazon S3. The company has a 1 Gbps dedicated network connection to AWS. What is the most cost-effective and time-efficient migration method?

A.Use AWS Snowball Edge to physically ship the data to AWS.

B.Use S3 Transfer Acceleration to upload data over the existing internet connection.

C.Use AWS DataSync to transfer data over the dedicated network.

D.Establish an AWS Direct Connect connection and use S3 multipart upload.

AnswerA

Snowball Edge provides fast, secure physical transfer; economical for large datasets.

Why this answer

AWS Snowball Edge is the most cost-effective and time-efficient method for migrating 500 TB of data over a 1 Gbps dedicated connection. At 1 Gbps, the theoretical maximum transfer time for 500 TB is over 46 days, not accounting for overhead and network issues. Snowball Edge physically ships the data, avoiding network transfer delays.

Option B is wrong because S3 Transfer Acceleration still uses the network and does not reduce the transfer time sufficiently for 500 TB. Option C is wrong because AWS DataSync is optimized for smaller, ongoing transfers and would still be limited by the 1 Gbps link. Option D is wrong because Direct Connect provides a dedicated network connection but still requires transferring data over the network, which would take many days.

Practice this question →

275

Multi-Selecteasy

A company is planning to migrate its on-premises infrastructure to AWS. The company wants to assess the current environment and create a migration plan. Which TWO AWS services should be used for discovery and assessment?

Select 2 answers

A.AWS Server Migration Service (SMS)

B.AWS Migration Hub

C.Amazon CloudWatch

D.AWS Application Discovery Service

E.AWS Trusted Advisor

AnswersB, D

AWS Migration Hub provides a single place to track the progress of application migrations across multiple AWS and partner solutions, including discovery data from Application Discovery Service, making it useful for assessment and planning.

Why this answer

For discovery and assessment of on-premises infrastructure, AWS Application Discovery Service (Option D) automatically discovers servers and application dependencies, while AWS Migration Hub (Option B) provides a centralized view to track migrations and integrates with discovery data. AWS Server Migration Service (Option A) is a replication tool for migrating servers, not a discovery service, and it has been deprecated. Amazon CloudWatch (Option C) is a monitoring service, and AWS Trusted Advisor (Option E) provides best practice recommendations; neither performs discovery.

Exam trap

Candidates may assume AWS Server Migration Service (SMS) is a discovery tool because of its name, but it is actually a replication service used for migrating servers. Discovery is better handled by AWS Application Discovery Service.

Practice this question →

276

MCQhard

A company is modernizing a .NET Framework application to run on AWS. The application currently uses Windows Communication Foundation (WCF) services. The company wants to minimize code changes and run on Linux. Which approach should the company take?

A.Use AWS App2Container to generate Windows containers and run on Amazon ECS with Windows.

B.Rewrite the WCF services as AWS Lambda functions using a custom runtime.

C.Port the application to .NET Core and deploy on Amazon ECS with Linux containers.

D.Containerize the application using AWS Fargate and run on Windows containers.

AnswerC

.NET Core runs on Linux, enabling deployment on Linux containers with minimal changes.

Why this answer

Migrating the .NET Framework application to .NET Core allows it to run on Linux with minimal code changes, as .NET Core is cross-platform. Deploying on Amazon ECS with Linux containers meets the requirement to run on Linux. Option A is incorrect because using AWS App2Container to generate Windows containers would still require Windows, not Linux.

Option B is incorrect because rewriting WCF services as AWS Lambda functions would require significant refactoring, not minimal code changes. Option D is incorrect because AWS Fargate is a compute platform, not a framework, and running Windows containers does not satisfy the requirement to run on Linux.

Practice this question →

277

Multi-Selectmedium

A company is migrating its on-premises applications to AWS. The company has a mix of Windows and Linux servers. The migration team wants to automate the discovery of application dependencies and track the migration progress. Which TWO AWS services should the team use? (Choose TWO.)

Select 2 answers

A.AWS Systems Manager

B.AWS Config

C.AWS Application Discovery Service

D.AWS CloudTrail

E.AWS Migration Hub

AnswersC, E

Discovers on-premises servers and their dependencies.

Why this answer

(AWS Application Discovery Service) and Option E (AWS Migration Hub) are correct. Application Discovery Service automatically discovers application dependencies. Migration Hub tracks migration progress across multiple tools.

Option A (AWS Systems Manager) manages instances but does not discover dependencies. Option B (AWS Config) tracks configuration changes but not dependencies. Option D (AWS CloudTrail) logs API calls.

Practice this question →

278

MCQmedium

A company is using AWS Migration Hub to track a large-scale migration to AWS. The company wants to automate the replatforming of multiple Windows web servers to Amazon EC2 instances running Amazon Linux 2. The migration must be repeatable and minimize manual intervention. Which AWS service should the company use to achieve this?

A.AWS Application Migration Service (MGN)

B.AWS OpsWorks for Chef Automate

C.AWS Server Migration Service (SMS)

D.AWS CloudFormation templates to provision new EC2 instances and migrate data manually

AnswerA

MGN automates server migration and supports replatforming to different OS.

Why this answer

AWS Application Migration Service (MGN) is the correct choice because it automates the replatforming of Windows web servers to Amazon Linux 2 by continuously replicating source servers, performing automated conversion of the OS and applications, and enabling cutover to target EC2 instances with minimal manual intervention. It supports heterogeneous OS migrations (e.g., Windows to Linux) and provides a repeatable, automated workflow that aligns with the company's requirement for a large-scale, repeatable migration.

Exam trap

The trap here is that candidates often confuse AWS Server Migration Service (SMS) with Application Migration Service (MGN), not realizing that SMS is deprecated and only supports homogeneous migrations, while MGN is the current service that supports heterogeneous OS replatforming like Windows to Linux.

How to eliminate wrong answers

Option B (AWS OpsWorks for Chef Automate) is wrong because it is a configuration management service that automates server configuration and compliance, not a migration tool; it cannot perform OS replatforming from Windows to Amazon Linux 2. Option C (AWS Server Migration Service) is wrong because it is deprecated and only supports homogeneous migrations (e.g., VMware to EC2) with agentless replication, not OS conversion from Windows to Linux. Option D (AWS CloudFormation templates to provision new EC2 instances and migrate data manually) is wrong because it requires manual data migration and does not automate the replatforming process, violating the requirement to minimize manual intervention.

Practice this question →

279

MCQeasy

A company is migrating a legacy application to AWS and needs to ensure that the application can access on-premises resources securely. The company has established an AWS Direct Connect connection. Which AWS service should the company use to route traffic between the VPC and the on-premises network?

A.Virtual Private Gateway (VGW).

B.VPC Peering.

C.Internet Gateway (IGW).

D.AWS Transit Gateway.

AnswerA

VGW is used with Direct Connect to connect to on-premises.

Why this answer

Virtual Private Gateway (VGW). A VGW is required to terminate the AWS Direct Connect connection and route traffic between the VPC and the on-premises network. Option B (VPC Peering) only connects VPCs, not on-premises networks.

Option C (Internet Gateway) is for internet access, not private connectivity via Direct Connect. Option D (AWS Transit Gateway) can be used to interconnect multiple VPCs and on-premises networks, but for a single VPC connected via Direct Connect, a VGW is the direct and appropriate service.

Practice this question →

280

MCQmedium

An S3 bucket contains thousands of objects under the 'logs/' prefix. The above AWS CLI command is run to list objects larger than 1000 bytes. The command returns an empty array, but there are known objects larger than 1000 bytes. What is the most likely reason?

A.The command only returns the first 1000 objects due to pagination

B.The prefix 'logs/' is case-sensitive and should be 'Logs/'

C.The command has a syntax error in the JMESPath query

D.The bucket policy does not allow listing objects

AnswerA

The list-objects API paginates; large objects may be in later pages.

Why this answer

The CLI command uses single quotes for the query, which is correct in Linux shells, but the issue is that the `Size` field is a number, and the comparison `Size > 1000` should work. However, the command might be returning an empty array because the bucket has a large number of objects and the API returned only a subset (truncated). The command does not include pagination, so it only returns the first 1000 objects.

If the large objects are after the first 1000, they won't appear. Also, the query syntax is correct. The bucket policy or permissions would cause an error, not an empty array.

Practice this question →

281

MCQmedium

A company is modernizing a legacy .NET application by containerizing it on Amazon ECS. The application currently uses Windows authentication against on-premises Active Directory. After migrating, the application needs to authenticate users against AWS Managed Microsoft AD. The security team requires that credentials never leave the corporate network. Which solution should the company implement?

A.Store user passwords in AWS Secrets Manager and authenticate against it.

B.Use AWS AD Connector to proxy authentication to on-premises AD.

C.Use AWS Directory Service Simple AD with password sync.

D.Set up AWS Managed Microsoft AD with a two-way trust to on-premises AD over Direct Connect.

AnswerD

Keeps credentials on-premises.

Why this answer

The correct solution is D. By setting up AWS Managed Microsoft AD with a two-way trust to on-premises Active Directory over Direct Connect, user authentication can be performed against the on-premises AD while credentials remain within the corporate network. The trust relationship allows the on-premises AD to authenticate users without credentials leaving the network.

Option A is incorrect because storing passwords in Secrets Manager and authenticating against it would require credentials to leave the corporate network, violating the security requirement. Option B, AD Connector, proxies authentication requests to on-premises AD but still requires credentials to be passed through the proxy, which may not satisfy the security policy. Option C, Simple AD, does not support trusts and is not compatible with on-premises AD integration.

Practice this question →

282

MCQhard

A company is modernizing its application by breaking a monolith into microservices on Amazon EKS. The application uses a shared PostgreSQL database. The company wants to implement a database-per-service pattern. The migration must be done with zero downtime. Which approach should the company use?

A.Implement the strangler fig pattern: gradually migrate functionality and data to new services.

B.Use AWS DMS with CDC to replicate the shared database to multiple target databases.

C.Use Amazon RDS read replicas to create separate databases for each service.

D.Create new databases for each service, migrate data during a maintenance window.

AnswerA

The strangler fig pattern enables incremental migration of functionality and data to new microservices without downtime, by gradually intercepting and routing traffic and data.

Why this answer

The strangler fig pattern allows gradual migration of functionality and data to new services, enabling zero downtime by incrementally routing traffic and data away from the monolith. Option B is incorrect because AWS DMS with CDC can replicate data but does not provide a gradual migration pattern; it would require custom logic to split data per service. Option C is incorrect because Amazon RDS read replicas are for read scaling, not for creating separate databases; they share the same underlying data and do not enable a database-per-service pattern.

Option D is incorrect because performing migration during a maintenance window causes downtime, which violates the zero-downtime requirement.

Practice this question →

283

MCQeasy

A company is migrating a legacy application to AWS and needs to ensure compliance with data residency requirements. The application stores personally identifiable information (PII) in an on-premises MySQL database. The company wants to encrypt the data at rest and in transit during the migration. The database will be migrated to Amazon RDS for MySQL. The solutions architect must ensure that all data is encrypted end-to-end. Which combination of steps will meet these requirements?

A.Use a custom AMI with encrypted EBS volumes, enforce TLS, and use AWS DMS with SSL.

B.Enable RDS encryption at launch, use AWS DMS with SSL, and require SSL certificate verification on the RDS endpoint.

C.Enable RDS encryption at launch, enforce TLS for connections, and configure the application to use SSL/TLS.

D.Enable RDS encryption after migration, use AWS DMS with SSL, and set up a VPN connection.

AnswerC

RDS encryption encrypts data at rest; TLS encrypts data in transit; application configuration ensures end-to-end encryption.

Why this answer

To meet the requirements for encrypting data at rest and in transit end-to-end, the solution must include encryption for the RDS database at rest (only possible at launch) and encryption in transit for both the migration process and ongoing application connections. Option C correctly combines enabling RDS encryption at launch (for at-rest encryption), enforcing TLS for connections to the RDS endpoint (for in-transit encryption), and configuring the application to use SSL/TLS (ensuring the application sends encrypted traffic). Option A is incorrect because using a custom AMI with encrypted EBS applies to EC2 instances, not RDS; the database needs to be migrated to RDS, not EC2.

Option B is partially correct but fails to include the application-side TLS configuration, so it does not ensure end-to-end encryption from the application to the database. Option D is incorrect because RDS encryption cannot be enabled after migration; it must be enabled at launch, and a VPN does not encrypt the database at rest.

Practice this question →

284

MCQhard

A company is modernizing a monolithic application by decomposing it into microservices. The application currently uses a single MySQL database. The company wants to use a polyglot persistence approach, with different microservices using the most appropriate database type. The team has limited experience with NoSQL databases. Which strategy should the team use to minimize risk during the migration?

A.Rewrite the entire application as microservices using a new database for each service from the start

B.Use the strangler fig pattern to incrementally replace parts of the monolith with microservices, starting with a non-critical function

C.Migrate the entire monolith to a containerized application on Amazon ECS in one go

D.Use AWS DMS to replicate the monolith's database to multiple target databases simultaneously

AnswerB

Correct. The strangler fig pattern allows gradual migration with minimal risk.

Why this answer

Using the strangler fig pattern allows incremental migration, replacing parts of the monolith with microservices one at a time. This reduces risk because each microservice can be tested independently. Starting with a non-critical service provides learning opportunity without high impact.

Practice this question →

285

MCQmedium

A company is migrating a monolithic application to Amazon ECS. The application currently stores session data in local memory. Which migration strategy should the company adopt to ensure scalability and fault tolerance?

A.Store session data in Amazon ElastiCache for Redis.

B.Use Amazon S3 to store session data.

C.Use sticky sessions (session affinity) on the Application Load Balancer.

D.Migrate session data to Amazon DynamoDB.

AnswerA

ElastiCache provides a highly available, in-memory cache that containers can access independently.

Why this answer

Amazon ElastiCache for Redis provides a fast, in-memory data store that can be shared across multiple containers, enabling horizontal scaling and fault tolerance. Option C (sticky sessions) ties a client to a specific container, preventing true statelessness and causing uneven load distribution. Option B (Amazon S3) has high latency unsuitable for session data.

Option D (Amazon DynamoDB) is a NoSQL database that can store sessions but is slower and more costly than a dedicated caching layer like Redis for session management.

Practice this question →

286

MCQhard

A migration engineer is setting up an AWS DMS task to migrate data from an on-premises Oracle database to Amazon RDS for PostgreSQL. The engineer attaches this IAM policy to the DMS service role. The DMS task fails with an error indicating insufficient privileges. What is the most likely cause?

A.The policy does not allow the s3:ListBucket action for the S3 bucket

B.The policy does not allow the dms:TestConnection action

C.The policy does not allow the dms:CreateEndpoint action

D.The policy does not allow the rds:ModifyDBInstance action

AnswerC

Correct. DMS needs permissions to create and describe endpoints for the source and target.

Why this answer

DMS needs permission to describe endpoints and test connections, which are not in the policy. The policy allows creating and starting tasks but not the prerequisite actions like creating endpoints. S3 access is correct if using S3 as a source/target, but the core issue is missing endpoint permissions.

Practice this question →

287

MCQmedium

A company is migrating a batch processing workload to AWS. The workload runs on a scheduled basis and processes large files from an on-premises NFS share. The company wants to use AWS services to replace the on-premises server and minimize operational overhead. Which solution is MOST suitable?

A.Use AWS Lambda to directly read from the NFS share over VPN and process the files.

B.Mount the on-premises NFS share to Amazon EFS using AWS Direct Connect, and use AWS Batch with AWS Fargate to process the files.

C.Use AWS Snowball Edge to transfer files to Amazon S3 and then process with EC2 instances.

D.Use AWS DataSync to copy files to Amazon S3 and trigger an AWS Lambda function to process.

AnswerB

Serverless, scheduled processing with minimal overhead.

Why this answer

AWS Batch with AWS Fargate is a serverless compute service that integrates with Amazon EFS. By mounting the on-premises NFS share to EFS via AWS Direct Connect, files are accessible in AWS without copying. AWS Batch can then process the files on a scheduled basis, minimizing operational overhead.

Option A is wrong because AWS Lambda has execution time and file size limits, and directly reading from NFS over VPN may be unreliable. Option C is wrong because Snowball Edge is a one-time transfer tool, not suitable for ongoing scheduled processing. Option D is wrong because while DataSync can copy files to S3, triggering Lambda has similar limitations, and using EC2 adds management overhead.

Practice this question →

288

MCQmedium

Refer to the exhibit. A solutions architect runs the CLI command to list EC2 instances. The output shows three instances. The architect wants to start the stopped instance and ensure it retains its instance store data. What should the architect do?

A.Modify the instance type to one that supports instance store, then start the instance.

B.Detach the instance store volume and attach it to a running instance.

C.Create an AMI from the stopped instance before starting it, then launch a new instance from the AMI.

D.Run `aws ec2 start-instances --instance-ids i-0a1b2c3d4e5f6g7h9` to start the instance.

AnswerC

An AMI captures only the root volume and any attached EBS volumes. Instance store volumes are not included in the AMI, so creating an AMI from a stopped instance will not capture the instance store data.

Why this answer

Instance store volumes provide temporary block-level storage for an EC2 instance. The data on instance store volumes persists only during the lifetime of the associated instance; it is lost when the instance is stopped or terminated. Therefore, once an instance with instance store volumes is stopped, the data on those volumes is irrecoverable.

None of the provided options can retain the instance store data. Option A is incorrect because modifying the instance type does not recover lost data. Option B is incorrect because instance store volumes cannot be detached.

Option C is incorrect because an AMI captures only EBS-backed volumes, not instance store volumes. Option D is incorrect because simply starting the instance will not restore the lost data. To preserve instance store data, it must be copied to persistent storage (e.g., EBS, S3) before stopping the instance.

Exam trap

A common misconception is that creating an AMI from a stopped instance will preserve all its data, including instance store volumes. In reality, AMIs only capture EBS-backed volumes, not instance store volumes.

Practice this question →

289

Multi-Selectmedium

A company is planning a large-scale migration of hundreds of applications to AWS. Which TWO strategies should the architect consider to reduce migration risks?

Select 2 answers

A.Use only the rehosting strategy for all applications

B.Migrate all applications in a single wave to reduce coordination effort

C.Use a wave-based migration approach with defined groups and dependencies

D.Conduct a pilot migration of a small subset of applications

E.Roll back all migrations if any application experiences issues

AnswersC, D

Wave-based migration allows controlled, incremental migration.

Why this answer

A pilot migration allows testing the process on a small set of applications. A wave-based approach groups applications for migration and helps manage dependencies. Rolling back all migrations if issues occur is not practical.

Migrating all at once increases risk. Using only rehosting may not be optimal for all applications.

Practice this question →

290

MCQeasy

A company wants to automate the migration of on-premises servers to AWS. The migration plan includes discovery, assessment, and automated replication. Which AWS service should the company use?

A.AWS CloudEndure Migration

B.AWS Migration Hub

C.AWS Schema Conversion Tool

D.AWS Database Migration Service

AnswerB

Correct. AWS Migration Hub provides a single location to track migration progress across multiple tools, integrates with discovery services, and supports automated replication through services like AWS Application Migration Service.

Why this answer

(AWS Migration Hub) is correct because it provides a centralized location to track the progress of migrations across multiple AWS and partner tools, including discovery, assessment, and replication. It integrates with AWS Application Discovery Service for discovery and assessment, and with AWS Server Migration Service (SMS) or AWS Application Migration Service (MGN) for automated replication. Option A (AWS CloudEndure Migration) is now part of AWS Application Migration Service (MGN) and focuses on replication, not end-to-end tracking.

Option C (AWS Schema Conversion Tool) is used for converting database schemas, not for server migration. Option D (AWS Database Migration Service) is specifically for database migrations, not for general server migration management.

Practice this question →

291

MCQeasy

A small business is migrating its on-premises infrastructure to AWS. The current environment consists of two VMs running a LAMP stack (Linux, Apache, MySQL, PHP) and a separate file server. The business has limited IT staff and wants to minimize operational overhead. They also want to ensure high availability for the web application. The company has a modest budget and is looking for a cost-effective solution. You need to design the migration. Which approach should be taken?

A.Migrate the VMs to two EC2 instances in an Auto Scaling group behind an ALB. Use RDS for MySQL Multi-AZ.

B.Use Amazon Lightsail to host the entire application on a single instance with a managed database.

C.Use AWS Elastic Beanstalk to deploy the web application. Use Amazon RDS for MySQL Multi-AZ for the database. Use S3 for file storage.

D.Containerize the application and run on Amazon ECS with Fargate. Use Amazon RDS for MySQL.

AnswerC

Minimizes operational overhead and provides high availability.

Why this answer

The best approach because AWS Elastic Beanstalk provides a managed platform for the web application, reducing operational overhead. Amazon RDS for MySQL Multi-AZ ensures high availability for the database with automatic failover. Using S3 for file storage is cost-effective and scalable.

Option A (EC2 Auto Scaling with ALB) requires more management than Elastic Beanstalk. Option B (Lightsail on a single instance) does not provide high availability. Option D (ECS Fargate) introduces containerization complexity and higher cost, which is not ideal for a small business with limited IT staff and a modest budget.

Practice this question →

292

MCQmedium

A company is migrating a batch processing workload to AWS. The workload runs a Java application that processes files from an S3 bucket. The company wants to minimize operational overhead. Which AWS service should the company use to run the Java application?

A.Amazon EC2

B.Amazon ECS with EC2 launch type

C.AWS Batch

D.AWS Lambda

AnswerD

Lambda is serverless and can process files triggered by S3 events.

Why this answer

(AWS Lambda) is correct because it allows running Java code in response to S3 events with no server management, minimizing operational overhead. AWS Lambda supports Java runtime, can be triggered by S3 object creation events, and automatically scales. Options A (Amazon EC2) and B (Amazon ECS with EC2 launch type) require managing EC2 instances or cluster, increasing overhead.

Option C (AWS Batch) is designed for batch jobs but still requires compute environments (EC2 or Fargate) and is more complex than Lambda for simple file processing.

Practice this question →

293

MCQmedium

A company is migrating a legacy .NET Framework 4.7 web application to AWS. The application currently runs on Windows Server 2012 R2 with IIS and uses SQL Server Express for local storage. The company wants to minimize re-architecture and reduce operational overhead. Which migration strategy should the company use?

A.Retire the application and replace it with a SaaS-based solution.

B.Refactor the application to use .NET Core and deploy on Linux containers with Amazon ECS.

C.Replatform the application to use AWS Elastic Beanstalk with a SQL Server Express Multi-AZ RDS instance.

D.Rehost the application on Amazon EC2 Windows instances using an AWS Migration Acceleration Program (MAP) partner tool.

AnswerD

Rehosting lifts and shifts the application with minimal changes, reducing operational overhead.

Why this answer

Rehosting (lift-and-shift) the .NET Framework 4.7 application to Amazon EC2 Windows instances minimizes re-architecture and reduces operational overhead. The application is tightly coupled to Windows Server and IIS, and SQL Server Express is a local database; rehosting preserves the existing architecture without code changes. Using an AWS MAP partner tool streamlines the migration process, aligning with the goal of minimizing changes.

Exam trap

The trap here is that candidates may choose replatforming (Option C) thinking it reduces overhead, but it actually requires modifying the database connection string and handling Multi-AZ failover, which adds re-architecture effort beyond a simple lift-and-shift.

How to eliminate wrong answers

Option A is wrong because retiring the application and replacing it with a SaaS solution would require significant re-architecture and business process changes, contradicting the goal to minimize re-architecture. Option B is wrong because refactoring to .NET Core and deploying on Linux containers with Amazon ECS would require substantial code changes and re-architecture, which the company wants to avoid. Option C is wrong because replatforming to AWS Elastic Beanstalk with a SQL Server Express Multi-AZ RDS instance still requires modifying the application to use a remote database instead of local SQL Server Express, introducing re-architecture and increased operational complexity.

Practice this question →

294

MCQeasy

A company is migrating its on-premises VMware VMs to AWS. The company wants to use the same management tools and maintain consistency. Which AWS service should be used for this migration?

A.AWS Server Migration Service (SMS)

B.AWS Snowball Edge

C.VMware Cloud on AWS

D.AWS Database Migration Service (DMS)

AnswerC

VMware Cloud on AWS allows running VMware workloads natively on AWS with consistent management.

Why this answer

VMware Cloud on AWS allows running VMware workloads natively on AWS with consistent management. Option A is wrong because Server Migration Service (SMS) is for server migration but not VMware management. Option B is wrong because Snowball Edge is for offline data transfer, not for VM migration.

Option D is wrong because Database Migration Service (DMS) is for database migration, not for VM migration.

Practice this question →

295

MCQeasy

A company is migrating a monolithic application to AWS. The application currently runs on a single on-premises server and uses a MySQL database. The company wants to minimize changes to the application code during migration. Which migration strategy should the company use?

A.Refactor the application to use microservices and Amazon RDS.

B.Rehost the application on Amazon EC2 and migrate the database to Amazon RDS.

C.Replatform the application to use AWS Elastic Beanstalk and Amazon Aurora.

D.Repurchase the application by adopting a SaaS solution.

AnswerB

Rehosting minimizes code changes.

Why this answer

Rehosting (lift-and-shift) involves moving applications to AWS with minimal changes, which fits the requirement to minimize code changes. Option A is wrong because refactoring requires code changes. Option C is wrong because replatforming involves some optimizations.

Option D is wrong because repurchasing replaces the application with a SaaS product.

Practice this question →

296

Multi-Selecteasy

A company is migrating a legacy .NET Framework 4.7 application to AWS. The application currently uses Windows Authentication and stores session state in-process. The company wants to minimize code changes and use AWS managed services. Which TWO strategies should the company adopt?

Select 2 answers

A.Migrate the application to run on Amazon EC2 instances joined to AWS Managed Microsoft AD.

B.Rewrite the application to .NET Core and deploy on AWS Elastic Beanstalk with Amazon RDS for SQL Server.

C.Store session data in Amazon ElastiCache for Redis using the Redis Session State Provider.

D.Use Amazon Cognito with an Active Directory connector for authentication.

E.Use Amazon DynamoDB to persist session state.

AnswersA, C

AWS Managed Microsoft AD supports Windows Authentication with minimal code changes.

Why this answer

AWS Managed Microsoft AD supports Windows Authentication and can integrate with EC2 without code changes. Option C is correct because ElastiCache for Redis can be used as a distributed session store, replacing in-process session state with minimal code changes (using Redis Session State Provider). Option B is wrong because .NET Core is not compatible with .NET Framework 4.7 without significant rewrite.

Option D is wrong because Cognito is for external identity providers, not Windows Authentication. Option E is wrong because DynamoDB is not a drop-in replacement for in-process sessions; it requires custom code.

Practice this question →

297

Multi-Selecthard

A company is migrating a multi-tier e-commerce application to AWS. The application consists of a web tier, an application tier, and a MySQL database tier. The company wants to improve scalability and availability while reducing administrative overhead. Which THREE actions should the solutions architect take? (Select THREE.)

Select 3 answers

A.Migrate the MySQL database to Amazon RDS Multi-AZ

B.Use Amazon ElastiCache to cache session data

C.Use Amazon EFS for shared storage between web instances

D.Configure an Application Load Balancer and Auto Scaling group for the web tier

E.Use Spot Instances for all EC2 instances to reduce costs

AnswersA, B, D

Correct: Reduces overhead and provides high availability.

Why this answer

Using an ALB and Auto Scaling for web tier improves scalability and availability. Migrating to RDS Multi-AZ reduces overhead and provides high availability. ElastiCache for session caching improves performance, but is not the only option for scalability.

EFS is for shared file storage, not needed. Using Spot Instances for all tiers may cause interruptions.

Practice this question →

298

MCQhard

A company is migrating a large Hadoop cluster to Amazon EMR. The cluster uses HDFS for storage. The company wants to decouple compute and storage to reduce costs. Which approach should the company take?

A.Use Amazon S3 as the data store and EMRFS

B.Use Amazon FSx for Lustre

C.Use Amazon EFS for HDFS

D.Use EBS volumes for HDFS

AnswerA

Decouples storage, allows compute to be ephemeral.

Why this answer

The correct approach is Option A: Use Amazon S3 as the data store with EMRFS (EMR File System). This decouples compute and storage because Amazon EMR clusters can read/write data directly to S3, allowing the cluster to be terminated when not needed while data persists in S3. Option B (FSx for Lustre) is a high-performance file system but still ties compute to storage.

Option C (EFS) is not optimized for Hadoop workloads. Option D (EBS volumes) are attached to the EC2 instances, coupling compute and storage.

Practice this question →

299

Drag & Dropmedium

Drag and drop the steps to configure an S3 bucket as a static website hosting in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The correct sequence ensures that the S3 bucket is properly configured for static website hosting. Start by creating the bucket, then enable static hosting, upload your files, apply a bucket policy for public read access, and finally test the website URL.

Practice this question →

300

MCQhard

Refer to the exhibit. A company is using AWS CloudFormation to migrate a serverless application. The stack creation failed. Based on the stack events, what is the root cause of the failure?

A.The CloudFormation template has a syntax error.

B.The AWS Lambda runtime specified in the template is not supported in the us-east-1 region.

C.The IAM role for the Lambda function does not have sufficient permissions.

D.The Lambda function code exceeds the maximum size limit.

AnswerB

The runtime is not supported.

Why this answer

The stack event error message indicates that the Lambda runtime 'nodejs18.x' is not supported in the us-east-1 region. This is a specific runtime issue, not a syntax error (A), permission issue (C), or code size limit (D).

Practice this question →

← PreviousPage 4 of 5 · 331 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Migration Modernization questions.

Start 20-question session