Continuous Improvement for Existing Solutions25% · 5 topics

Q1. Which statement about AWS X-Ray is incorrect?

1. Tracing can be enabled with integrations such as Lambda and API Gateway
2. Sampling rules adjust the proportion of requests recorded
3. A service map shows how requests flow across multiple services and the latency of each segment
4. It automatically records the contents of all traffic without code changes or installing an SDK or agent

Q2. An existing system with steadily increasing usage may hit service quota limits by next year. What is the most appropriate measure?

1. Contact AWS Support to discuss after errors occur from hitting the limit
2. Freeze the number of users at the current level and do not let new departments use the system
3. Monitor Service Quotas utilization with CloudWatch and request increases before approaching limits
4. Quotas increase automatically with usage, so no monitoring or preparation is needed

Q1. Production settings were changed manually in the console, diverged from the staging environment and caused an outage. What is the most appropriate improvement?

1. Record config changes with AWS Config and notify staff on change
2. Record change actions in CloudTrail to identify who made them
3. Codify the configuration in CloudFormation, change via templates, and find manual changes with drift detection
4. Require approval of change requests before console changes in production

Q2. Security Hub found that S3 Block Public Access is not configured on buckets in many accounts. No bucket needs to be public. What is the most appropriate next step?

1. Enable account-level Block Public Access in all accounts and prevent changes with an SCP
2. Send a ticket to the bucket owner for each Security Hub finding
3. Deny requests where aws:SecureTransport is false in bucket policies
4. Set Block Public Access per bucket and monitor with Config rules

Q1. An internal quoting system's EC2 instance has had CPU utilization above 90% for months and responds slowly. Compute Optimizer shows it is “under-provisioned.” What is the most appropriate next step?

1. Ignore the Compute Optimizer recommendation and raise the CPU alarm threshold to 99%
2. Downsize the instance type to cut costs and use the freed budget for another monitoring tool
3. Ask users to create fewer quotes to reduce CPU load itself
4. Test the recommended larger or newer-generation instance type in staging, confirm the effect and change it

Q2. Which statement about using ElastiCache as a cache is incorrect?

1. Setting a TTL (expiration) on cached data prevents stale data from remaining indefinitely
2. Putting frequently read data in memory reduces database read load
3. When the database is updated, the app must be designed to update or invalidate the cache
4. Once data is cached it is always synced with the database automatically, so cache handling on updates need not be designed

Q1. In a production-like environment, you want to verify that automatic recovery mechanisms and procedures really work when an AZ fails or instances stop. Which method is most appropriate?

1. Plan experiments that deliberately inject faults with AWS FIS, define stop conditions and observe the impact
2. Assume failures will not happen and consider reviewing design documents sufficient for automatic recovery
3. In production, have staff manually stop instances one after another without notice to check
4. Judge that the mechanisms work correctly because no failure has ever occurred

Q2. You want to eliminate single points of failure (SPOFs) in an existing architecture. Private subnets in three AZs all reach the internet through a single NAT gateway in AZ-a. Which measure is the most suitable?

1. Make Direct Connect redundant at another location
2. Move the files to Amazon EFS
3. Place a NAT gateway in each AZ
4. Make RDS a Multi-AZ deployment

Q1. You do not know where personal data is stored in S3 across many accounts. Which method is most appropriate?

1. Detect suspicious bucket access with GuardDuty S3 Protection
2. View object counts and size per bucket in S3 Storage Lens
3. Enable Amazon Macie organization-wide to discover sensitive S3 data automatically
4. Find unencrypted buckets with AWS Config rules

Q2. You are starting a company-wide AWS cost reduction effort. What should you do first?

1. Buy Compute Savings Plans to lower EC2 and Lambda prices
2. Give every department a flat 20% reduction target and let them choose how
3. Check the breakdown by usage type in Cost Explorer and prioritize the biggest items
4. Resize every instance following Compute Optimizer recommendations