AWS Solutions Architect Associate(SAA-C02)- Quiz 4

Q1.
An Amazon RDS Read Replica is being deployed in a separate region. The master database is not encrypted but all data in the new region must be encrypted. How can this be achieved?

Enable encryption using Key Management Service (KMS) when creating the cross-region Read Replica

Encrypt a snapshot from the master DB instance, create an encrypted cross-region Read Replica from the snapshot

Enable encryption on the master DB instance, then create an encrypted cross-region Read Replica

Encrypt a snapshot from the master DB instance, create a new encrypted master DB instance, and then create an encrypted cross-region Read Replica

WHY A IS False?	CONCEPT: Key Management Service (KMS)	.AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use. AWS KMS is a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or are in the process of being validated, to protect your keys. You cannot create an encrypted Read Replica from an unencrypted master DB instance. You also cannot enable encryption after launch time for the master DB instance. That's why we can't enable encryption using Key Management Service (KMS) when creating the cross-region Read Replica.
WHY B IS False?	CONCEPT: Cross-Region Read Replica	You cannot create an encrypted Read Replica from an unencrypted master DB instance. You also cannot enable encryption after launch time for the master DB instance. That's why we can't encrypt a snapshot from the master DB instance, create an encrypted cross-region Read Replica from the snapshot.
WHY C IS False?	CONCEPT: Cross-Region Read Replica	.Similar reason as above.
WHY D IS True?	CONCEPT: .Encrypted Master DB	You cannot create an encrypted Read Replica from an unencrypted master DB instance. You also cannot enable encryption after launch time for the master DB instance. Therefore, you must create a new master DB by taking a snapshot of the existing DB, encrypting it, and then creating the new DB from the snapshot. You can then create the encrypted cross-region Read Replica of the master DB.
Short Trick	"Master database is not encrypted" - For this you must create a new master DB by taking a snapshot of the existing DB, encrypting it, and then creating the new DB from the snapshot. You can then create the encrypted cross-region Read Replica of the master DB.
References:	REFERNCED DOCS

Q2.
A retail company with many stores and warehouses is implementing IoT sensors to gather monitoring data from devices in each location. The data will be sent to AWS in real time. A solutions architect must provide a solution for ensuring events are received in order for each device and ensure that data is saved for future processing.

Which solution would be MOST efficient?

Use Amazon Kinesis Data Streams for real-time events with a partition key for each device. Use Amazon Kinesis Data Firehose to save data to Amazon S3

Use an Amazon SQS standard queue for real-time events with one queue for each device. Trigger an AWS Lambda function from the SQS queue to save data to Amazon S3

Use Amazon Kinesis Data Streams for real-time events with a shard for each device. Use Amazon Kinesis Data Firehose to save data to Amazon EBS

Use an Amazon SQS FIFO queue for real-time events with one queue for each device. Trigger an AWS Lambda function for the SQS queue to save data to Amazon EFS

WHY A IS True?	CONCEPT: Amazon Kinesis Data Streams & S3	Amazon Kinesis Data Streams collect and process data in real time. A Kinesis data stream is a set of shards. Each shard has a sequence of data records. Each data record has a sequence number hat is assigned by Kinesis Data Streams. A shard is a uniquely identified sequence of data records in a stream. A partition key is used to group data by shard within a stream. Kinesis Data Streams segregates the data records belonging to a stream into multiple shards. It uses the partition key that is associated with each data record to determine which shard a given data record belongs to. For this scenario, the solutions architect can use a partition key for each device. This will ensure the records for that device are grouped by shard and the shard will ensure ordering. Amazon S3 is a valid destination for saving data records.
WHY B IS False?	CONCEPT: SQS standard queue	SQS is not the most efficient service for streaming, real-time data.
WHY C IS False?	CONCEPT: Amazon Kinesis Data Streams & EBS	You cannot save data to EBS from Kinesis.
WHY D IS False?	CONCEPT: SQS FIFO queue	SQS FIFO queue can receive messages in the order they were sent. 300 messages/s without batching, 3000 /s with batching
Short Trick	1."in real time" - clearly rules out SQS options as SQS isn't suitable with real-time data. 2."data is saved for future processing." - You cannot save data to EBS from Kinesis.That's only leave us with option A & S3 is suitable storage.
References:	REFERNCED DOCS

Q3.
A Solutions Architect needs to transform data that is being uploaded into S3. The uploads happen sporadically and the transformation should be triggered by an event. The transformed data should then be loaded into a target data store.

What services would be used to deliver this solution in the MOST cost-effective manner? (Select TWO.)

Configure CloudFormation to provision AWS Data Pipeline to transform the data

Configure S3 event notifications to trigger a Lambda function when data is uploaded and use the Lambda function to trigger the ETL job

Use AWS Glue to extract, transform and load the data into the target data store

Configure CloudFormation to provision a Kinesis data stream to transform the data and load it into S3

WHY A IS False?	CONCEPT: AWS Data Pipeline	AWS Data Pipeline can be used to automate the movement and transformation of data, it relies on other services to actually transform the data.
WHY B IS True?	CONCEPT: S3 event notifications & Lambda	The Amazon S3 notification feature enables you to receive notifications when certain events happen in your bucket. To enable notifications, you must first add a notification configuration that identifies the events you want Amazon S3 to publish and the destinations where you want Amazon S3 to send the notifications. You store this configuration in the notification subresource that is associated with a bucket. S3 event notifications triggering a Lambda function is completely serverless and cost-effective.
WHY C IS True?	CONCEPT: AWS Glue	AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics into a data store such as S3.
WHY D IS False?	CONCEPT: Kinesis data stream	Kinesis Data Streams is used for processing data, rather than extracting and transforming it. The Kinesis consumers are EC2 instances which are not as cost-effective as serverless solutions.
Short Trick	1."MOST cost-effective" - means we require a serverless solution which clear cut indicate towards Lambda & Glue as both are serverless. 2." transformation should be triggered by an event" - clearly refers to S3 event notifications. 3. "should then be loaded into a target data store" - AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics into a data store such as S3.
References:	REFERNCED DOCS

Q1.An Amazon RDS Read Replica is being deployed in a separate region. The master database is not encrypted but all data in the new region must be encrypted. How can this be achieved?

Q1.
An Amazon RDS Read Replica is being deployed in a separate region. The master database is not encrypted but all data in the new region must be encrypted. How can this be achieved?