domain cloud.example.com for the resources stored within VPCs.

The company has the following DNS resolution requirements:

On-premises systems should be able to resolve and connect to cloud.example.com.

All VPCs should be able to resolve cloud.example.com.

There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.

Which architecture should the company use to meet these requirements with the HIGHEST performance? 一家公司需要构建一个混合 DNS 解决方案。此解决方案将使用 Amazon Route 53 私有托管区域来存储 VPC 中存储的资源的域 cloud.example.com。该公司具有以下 DNS 解析要求：本地系统应能够解析并连接到 cloud.example.com。所有 VPC 都应能够解析 cloud.example.com。本地公司网络与 AWS Transit Gateway 之间已建立 AWS Direct Connect 连接。公司应使用哪种架构来满足这些要求并获得最高性能？

and is integrated with different AWS Lambda functions for each API operation. The company uses Amazon Route 53 for DNS

and has created a resource record of weather.example.com. The company stores data for the API in Amazon DynamoDB tables.

The company needs a solution that will give the API the ability to fail over to a different AWS Region.

Which solution will meet these requirements? 一家公司通过基于 REST 的 API 向多个客户提供天气数据。该 API 由 Amazon API Gateway 托管，并针对每个 API 操作集成了不同的 AWS Lambda 函数。该公司使用 Amazon Route 53 作为 DNS，并创建了 weather.example.com 的资源记录。该公司将 API 数据存储在 Amazon DynamoDB 表中。该公司需要一个解决方案，使 API 能够故障转移到不同的 AWS 区域。哪种解决方案可以满足这些要求？

members of the Production OU. Administrators use deny list SCPs in the root of the organization to manage access to

restricted services.

The company recently acquired a new business unit and invited the new unit’s existing AWS account to the organization. Once

onboarded, the administrators of the new business unit discovered that they are not able to update existing AWS Config rules

to meet the company’s policies.

Which option will allow administrators to make changes and continue to enforce the current policies without introducing

additional long-term maintenance? 一家公司使用 AWS Organizations 和一个名为 Production 的 OU 来管理多个账户。所有账户都是 Production OU 的成员。管理员使用组织根目录中的拒绝列表 SCP 来管理对受限服务的访问。该公司最近收购了一个新的业务部门，并邀请新部门的现有 AWS 账户加入该组织。加入后，新业务部门的管理员发现他们无法更新现有的 AWS Config 规则以满足公司的政策。哪个选项将允许管理员进行更改并继续执行当前策略，而无需引入额外的长期维护？

server running a stateful application. The application connects to a PostgreSQL database running on a separate server. The

application’s user base is expected to grow significantly, so the company is migrating the application and database to AWS.

The solution will use Amazon Aurora PostgreSQL, Amazon EC2 Auto Scaling, and Elastic Load Balancing.

Which solution will provide a consistent user experience that will allow the application and database tiers to scale? 一家公司正在本地数据中心运行两层基于 Web 的应用程序。应用程序层由运行有状态应用程序的单个服务器组成。该应用程序连接到在单独服务器上运行的 PostgreSQL 数据库。该应用程序的用户群预计将大幅增长，因此该公司正在将应用程序和数据库迁移到 AWS。该解决方案将使用 Amazon Aurora PostgreSQL、Amazon EC2 Auto Scaling 和 Elastic Load Balancing。哪种解决方案将提供一致的用户体验，允许应用程序和数据库层扩展？

as TVs and internet radios access the applications. Many older devices do not support certain HTTP headers and exhibit errors

when these headers are present in responses. The company has configured an on-premises load balancer to remove the

unsupported headers from responses sent to older devices, which the company identified by the User-Agent headers.

The company wants to migrate the service to AWS, adopt serverless technologies, and retain the ability to support the older

devices. The company has already migrated the applications into a set of AWS Lambda functions.

Which solution will meet these requirements? 一家公司使用一项服务从公司在本地托管的应用程序中收集元数据。电视和互联网收音机等消费设备可访问这些应用程序。许多旧设备不支持某些 HTTP 标头，当这些标头出现在响应中时，会出现错误。该公司已配置本地负载均衡器，以从发送到旧设备的响应中删除不受支持的标头，公司通过 User-Agent 标头识别这些设备。该公司希望将服务迁移到 AWS，采用无服务器技术，并保留支持旧设备的能力。该公司已将应用程序迁移到一组 AWS Lambda 函数中。哪种解决方案可以满足这些要求？

saved in an Amazon S3 bucket under Account A, which belongs to the retail company. The business partner company wants one

of its IAM users, User_DataProcessor, to access the files from its own AWS account (Account B)

Which combination of steps must the companies take so that User_DataProcessor can access the S3 bucket successfully?

(Choose two.) 一家零售公司需要向另一家公司（即其业务合作伙伴）提供一系列数据文件。这些文件保存在属于该零售公司的账户 A 下的 Amazon S3 存储桶中。该业务合作伙伴公司希望其 IAM 用户之一 User_DataProcessor 从其自己的 AWS 账户（账户 B）访问这些文件。公司必须采取哪些步骤组合才能使 User_DataProcessor 能够成功访问 S3 存储桶？（选择两个。）

as microservices that run on containers. Separate versions of the application exist in two distinct environments: production and

testing. Load for the application is variable, but the minimum load and the maximum load are known. A solutions architect

needs to design the updated application with a serverless architecture that minimizes operational complexity.

Which solution will meet these requirements MOST cost-effectively? 一家公司正在 Amazon EC2 实例上运行传统的 Web 应用程序。该公司需要将该应用程序重构为在容器上运行的微服务。该应用程序的不同版本存在于两个不同的环境中：生产和测试。应用程序的负载是可变的，但最小负载和最大负载是已知的。解决方案架构师需要使用无服务器架构来设计更新的应用程序，以最大限度地降低操作复杂性。哪种解决方案能够最经济高效地满足这些要求？