Continuous Improvement for Existing Solutions

151. An existing workload produces alerts that operators routinely resolve with the same manual steps. Which solution most improves operational excellence?

1. A Add the manual steps to the runbook documentation so they are easier to follow.
2. B Route the alerts to a larger on-call rotation so they are resolved sooner.
3. C Encode the remediation as a Systems Manager Automation runbook and invoke it from the alarm through EventBridge.
4. D Increase the alarm threshold so the condition is reported less often.

152. An organization must verify that its recovery actions work under realistic failure conditions, with a guardrail that halts the test if impact spreads. Which solution meets these requirements?

1. A Run AWS Fault Injection Service experiments with stop conditions bound to CloudWatch alarms.
2. B Terminate production components manually during a low-traffic window.
3. C Restore the workload from backup into a test account and measure the time taken.
4. D Review the recovery procedure with the operations team each quarter.

153. An audit finds that several roles in an existing environment hold permissions they have never used. Which solution meets these requirements?

1. A Attach a permissions boundary allowing the same actions the roles already hold.
2. B Delete the roles that the audit identified and recreate them when someone complains.
3. C Enable IAM Access Analyzer unused access analysis and remove the permissions it reports as unused over a representative period.
4. D Replace each role's policy with a minimal policy and restore permissions as failures occur.

154. An existing environment stores database credentials in application configuration files across many instances. Which solution meets these requirements?

1. A Move the credentials to Systems Manager Parameter Store as String parameters readable by the instances.
2. B Move the credentials to AWS Secrets Manager with rotation enabled and grant each instance role permission to retrieve them.
3. C Rotate the credentials manually each quarter and redistribute the configuration files.
4. D Encrypt the configuration files at rest and restrict the file permissions on each instance.

155. An organization must ensure that vulnerabilities detected in running workloads trigger an automated response rather than waiting for a review cycle. Which solution meets these requirements?

1. A Route Amazon Inspector findings through EventBridge to a Systems Manager Automation runbook that applies the remediation.
2. B Review the Amazon Inspector findings dashboard at the weekly operations meeting.
3. C Increase the frequency of the Amazon Inspector scans.
4. D Export the Amazon Inspector findings to Amazon S3 for quarterly analysis.

156. An existing global application suffers high latency for users far from its single Region, and its traffic is dynamic and not cacheable. Which solution meets these requirements?

1. A Front the application with AWS Global Accelerator so traffic enters the AWS network at a nearby edge location.
2. B Increase the size of the application instances in the existing Region.
3. C Front the application with Amazon CloudFront and disable caching.
4. D Add read replicas of the database in additional Regions.

157. An architect must identify the bottleneck in an existing multi-tier application where end-to-end latency has increased. Which solution meets these requirements?

1. A Instrument the tiers with AWS X-Ray and examine the service map and segment latencies.
2. B Compare CloudWatch CPU metrics across the tiers over the affected period.
3. C Review the application's error logs for exceptions during the period.
4. D Increase the instance size of every tier and observe whether latency improves.

158. An existing workload has a single NAT gateway serving private subnets in three Availability Zones. Which change most improves reliability?

1. A Deploy a second NAT gateway in the same Availability Zone as the first.
2. B Replace the NAT gateway with a NAT instance in an Auto Scaling group.
3. C Increase the size of the subnets so more addresses are available.
4. D Deploy a NAT gateway in each Availability Zone and route each subnet to the gateway in its own zone.

159. An existing application approaches a service quota during traffic peaks, and requests begin failing. Which solution meets these requirements?

1. A Retry the failed requests with exponential backoff until they succeed.
2. B Create a CloudWatch alarm on the application's error rate and request an increase when it fires.
3. C Create a CloudWatch alarm on the Service Quotas usage metric at a percentage of the limit and request an increase before the limit is reached.
4. D Distribute the workload across additional Regions to avoid the quota.

160. An architect must identify underutilized resources across an existing estate and size them correctly. Which solution meets these requirements?

1. A Enable AWS Budgets alerts on each account's total spend.
2. B Halve the instance size of every resource and observe whether performance degrades.
3. C Review AWS Compute Optimizer recommendations alongside the Cost and Usage Report to identify and resize over-provisioned resources.
4. D Review the monthly invoice and reduce the largest line items.

161. An existing workload's data transfer costs are dominated by traffic from private subnets to Amazon S3 through a NAT gateway. Which solution meets these requirements?

1. A Create a gateway VPC endpoint for Amazon S3 and route the traffic through it instead of the NAT gateway.
2. B Move the instances to public subnets with Elastic IP addresses.
3. C Replace the NAT gateway with a smaller NAT instance.
4. D Enable S3 Transfer Acceleration on the destination bucket.

162. An existing workload's deployments require a manual configuration step that operators occasionally omit. Which improvement is appropriate?

1. A Add the step to the deployment checklist in bold.
2. B Assign a second operator to verify the step was performed.
3. C Record each omission in the incident log for later review.
4. D Encode the step in the deployment pipeline so it cannot be skipped.

163. An architect must prioritize automation opportunities across an existing solution stack. Which criterion is most appropriate?

1. A The technical interest of the task to the engineering team.
2. B The number of engineers currently trained to perform the task.
3. C The age of the component the task relates to.
4. D The frequency of the task multiplied by the effort and risk of performing it manually.

164. An existing workload's logging strategy produces high volumes that are rarely queried after the first week. Which improvement is appropriate?

1. A Retain recent logs in a queryable store and move older logs to cheaper storage under a lifecycle policy.
2. B Reduce the verbosity of the application's logging.
3. C Delete logs older than one week.
4. D Increase the retention period so no log is ever lost.

165. An audit of an existing environment must establish whether any resource policy grants access outside the organization. Which solution meets these requirements?

1. A Review each resource policy manually during the annual audit.
2. B Enable AWS CloudTrail and review the cross-account API calls.
3. C Enable Amazon GuardDuty and review its findings for cross-account activity.
4. D Enable IAM Access Analyzer with the organization as the zone of trust and review its external access findings.

166. An existing environment stores long-lived IAM access keys on application servers. Which improvement is appropriate?

1. A Restrict the keys to specific source IP addresses.
2. B Replace the keys with instance profiles so applications receive temporary credentials automatically.
3. C Encrypt the files holding the keys on each server.
4. D Rotate the keys on a quarterly schedule.

167. An existing environment must be assessed continuously for resources that drift from a required security configuration. Which solution meets these requirements?

1. A Run a quarterly manual review against a documented standard.
2. B Deploy AWS Config rules through an organization conformance pack with automatic remediation attached.
3. C Enable Amazon Inspector and review software vulnerability findings.
4. D Enable AWS CloudTrail and review configuration change events weekly.

168. An existing environment must prioritize its response to detected vulnerabilities rather than treating all findings equally. Which approach is appropriate?

1. A Rank findings by severity combined with the exposure and business criticality of the affected resource.
2. B Address findings in whichever service has the most findings.
3. C Address findings affecting the largest number of resources first.
4. D Address findings in the order they were detected.

169. An existing workload's performance target must be expressed so improvement can be measured objectively. Which formulation is appropriate?

1. A A target average latency across all operations combined.
2. B A statement that the application should feel faster to users.
3. C A target for the number of instances serving the workload.
4. D A percentile latency target for a named operation under a stated load.

170. An architect must evaluate a proposed performance remediation before recommending it. Which approach is appropriate?

1. A Estimate the improvement from the service's published specifications.
2. B Adopt the change because it is a recognised best practice.
3. C Apply the change in production and monitor the effect.
4. D Test the change against a representative load and compare the measured result with the current baseline.

171. An existing workload's bottleneck must be identified before any change is made. Which approach is appropriate?

1. A Review the architecture diagram for components likely to be slow.
2. B Instrument the request path and identify which segment consumes the most time.
3. C Compare the workload's cost against similar workloads.
4. D Increase the size of every tier and observe whether performance improves.

172. An existing workload's growth trend must be understood before capacity decisions are made. Which approach is appropriate?

1. A Use the peak observed in the last month as the planning figure.
2. B Provision for the largest capacity the budget permits.
3. C Analyse usage over a period long enough to include seasonal variation and project forward from it.
4. D Use the average of the last week as the planning figure.

173. An existing workload has a single database instance with no standby. Which improvement most directly addresses reliability?

1. A Add a read replica in the same Availability Zone.
2. B Increase the instance class of the database.
3. C Convert the database to a Multi-AZ deployment with automatic failover.
4. D Increase the frequency of automated backups.

174. An existing workload relies on a component that cannot be made redundant. Which approach is appropriate?

1. A Reduce the impact of its failure by degrading gracefully, and measure the recovery time for the component explicitly.
2. B Increase the component's instance size to reduce failure probability.
3. C Increase monitoring frequency on the component.
4. D Accept the risk without further analysis because redundancy is impossible.

175. An architect must identify resources that are provisioned but never used across a large existing estate. Which solution meets these requirements?

1. A Review the monthly invoice and investigate the largest services.
2. B Ask each team to report resources they no longer need.
3. C Review AWS Trusted Advisor and AWS Compute Optimizer findings alongside the Cost and Usage Report at resource granularity.
4. D Terminate resources with no tags.

176. An existing workload's storage cost is dominated by data that is rarely accessed after 60 days, with unpredictable access thereafter. Which solution meets these requirements?

1. A Move the data to S3 Intelligent-Tiering so it transitions automatically based on observed access.
2. B Keep the data in S3 Standard and negotiate a volume discount.
3. C Apply a lifecycle rule expiring the data at 60 days.
4. D Apply a lifecycle rule transitioning the data to Glacier Deep Archive at 60 days.

177. An architect must design a billing alarm that gives useful warning rather than firing at the end of the month. Which approach is appropriate?

1. A Alarm on the total number of running resources.
2. B Alarm on actual spend when it reaches the full budget amount.
3. C Review the invoice when it is issued.
4. D Alarm on forecasted spend against the budget so the warning arrives while the month can still be influenced.

178. An existing workload's runbooks are out of date, and operators improvise during incidents. Which improvement is appropriate?

1. A Record each incident's resolution in a ticket.
2. B Rewrite the runbooks as documents and review them annually.
3. C Rely on experienced operators' knowledge.
4. D Convert the runbooks to executable automation documents that are tested and versioned alongside the infrastructure.

179. An existing workload's deployment process requires four hours of downtime for each release. Which improvement is appropriate?

1. A Perform releases overnight.
2. B Schedule releases less frequently to reduce total downtime.
3. C Combine several releases into one larger release.
4. D Adopt a blue/green or rolling deployment so releases occur without downtime.

180. An existing workload has no way to know whether a recent change caused a performance regression. Which improvement is appropriate?

1. A Establish baseline metrics before each change and compare after deployment, with deployment markers on the dashboards.
2. B Compare the current month's metrics with the previous month's.
3. C Ask users whether the application feels slower.
4. D Increase the instance size after each change to be safe.

181. An existing workload's configuration is managed by hand, and instances drift from the expected state. Which solution meets these requirements?

1. A Document the expected state and audit quarterly.
2. B Restrict console access so fewer people can change configuration.
3. C Rebuild every instance weekly.
4. D Define the desired state with a configuration management service and apply it on a schedule so drift is corrected.

182. An existing environment must retain data for a regulatory period and delete it afterwards, with proof that deletion occurred. Which approach is appropriate?

1. A Move the data to a colder storage class after the period.
2. B Apply lifecycle expiry after the retention period and retain the CloudTrail or S3 inventory records demonstrating deletion.
3. C Keep the data indefinitely to be safe.
4. D Delete the data manually when the period ends.

183. An existing environment has resources that are not compliant with encryption requirements, and the team must find and fix them at scale. Which approach is appropriate?

1. A Deploy AWS Config rules for the encryption requirements with automatic remediation actions attached.
2. B Review each resource manually for encryption.
3. C Send a reminder to resource owners.
4. D Enable encryption by default and leave existing resources.

184. A security review must confirm that every layer of an existing workload has appropriate controls, not just the perimeter. Which approach is appropriate?

1. A Confirm that the perimeter blocks all unauthorised traffic.
2. B Review the IAM policies only.
3. C Review controls at each layer: edge, network, compute, data, and identity, and identify gaps where a bypass of one layer is not caught by another.
4. D Review the WAF and firewall rules only.

185. An existing workload's user actions must be traceable end to end across services for compliance. Which approach is appropriate?

1. A Propagate a correlation identifier through every service call and record it in each service's logs and CloudTrail where applicable.
2. B Review each service's logs independently.
3. C Rely on timestamps to correlate logs across services.
4. D Log only at the entry point.

186. An existing environment must respond automatically when a vulnerability is detected in a running container. Which approach is appropriate?

1. A Route the vulnerability finding through EventBridge to automation that redeploys the workload from a patched image.
2. B Email the finding to the team for manual action.
3. C Stop the container immediately.
4. D Log the finding for the next patch cycle.

187. An existing environment must implement a backup process that is verified rather than assumed to work. Which approach is appropriate?

1. A Check that backup files exist in storage.
2. B Review the backup configuration quarterly.
3. C Confirm that backup jobs complete successfully.
4. D Restore from backups on a schedule into an isolated environment and verify the restored data's integrity.

188. An existing workload's performance target must be defined so it can be measured and enforced. Which formulation is appropriate?

1. A Average latency should be acceptable.
2. B The workload should perform as well as competitors.
3. C Responses should be fast.
4. D A 99th percentile latency below a stated threshold for a named operation, measured over a defined window.

189. An architect must propose a managed service to replace a self-managed component in an existing workload. Which justification is appropriate?

1. A The managed service is newer.
2. B Other companies use the managed service.
3. C The managed service is what AWS recommends.
4. D A comparison of the operational effort and risk of the self-managed component against the managed service's cost and any capability differences.

190. An existing workload's database is the bottleneck under load, and the queries cannot be changed. Which combination of steps meets these requirements? (Select TWO.)

1. A Increase the application's connection pool size.
2. B Add more application instances.
3. C Add read replicas and direct read queries to them.
4. D Reduce the database's backup frequency.
5. E Add a caching layer for frequently repeated query results.

191. An existing workload's right-sizing must be based on evidence rather than guesswork. Which approach is appropriate?

1. A Choose the smallest instance that seems reasonable.
2. B Analyse utilization metrics over a representative period including peaks and use Compute Optimizer recommendations.
3. C Match the instance size used by a similar workload.
4. D Keep the current size to avoid risk.

192. A performance bottleneck in an existing workload is suspected to be network-related. Which diagnostic is appropriate?

1. A Increase every instance size.
2. B Move all tiers to one Availability Zone.
3. C Enable enhanced networking and assume it fixes the problem.
4. D Measure network throughput and latency between the tiers and compare against the instances' network performance limits.

193. An existing workload's usage has grown steadily, and capacity must be planned to stay ahead. Which approach is appropriate?

1. A Wait until utilization reaches 100 percent.
2. B Add capacity when errors appear.
3. C Double all capacity now.
4. D Project the growth trend forward, identify the resource that will hit a limit first, and plan its expansion before the projected date.

194. An existing workload has a self-managed message broker on a single instance. Which improvement most directly addresses reliability?

1. A Add monitoring to the broker instance.
2. B Increase the instance's size.
3. C Migrate to a managed message broker with built-in multi-AZ redundancy.
4. D Take snapshots of the broker's volume hourly.

195. An existing workload's self-healing must be improved so it recovers from common failures without operator action. Which combination of steps meets these requirements? (Select TWO.)

1. A Add more monitoring dashboards.
2. B Route alarms for known failure modes to automated remediation runbooks.
3. C Increase the on-call rotation size.
4. D Use Auto Scaling groups with health checks so failed instances are replaced.
5. E Document recovery steps in the runbook.

196. An existing environment has EBS volumes and snapshots that are no longer attached to anything. Which approach is appropriate?

1. A Leave them because storage is cheap.
2. B Move them to a cheaper storage class.
3. C Delete all volumes not attached today.
4. D Identify unattached volumes and orphaned snapshots with Trusted Advisor or a scripted inventory, verify they are unneeded, and delete them.

197. An existing workload's data transfer costs are unexpectedly high. Which approach is appropriate?

1. A Enable compression on all traffic.
2. B Reduce all traffic uniformly.
3. C Move everything into one Availability Zone.
4. D Analyse the Cost and Usage Report by transfer type to identify whether the cost is inter-AZ, inter-Region, or internet egress, then address the dominant type.

198. An existing environment must be reviewed for cost at a granular level to find specific waste. Which source provides this?

1. A Cost Explorer at the service level only.
2. B The AWS Free Tier usage page.
3. C The Cost and Usage Report at resource-level granularity, queried by service, tag, and usage type.
4. D The monthly invoice total.

199. An existing workload runs on Spot Instances but is frequently interrupted. Which improvement reduces interruptions?

1. A Switch entirely to On-Demand.
2. B Diversify across many instance types and Availability Zones so the workload can use whichever pool has capacity.
3. C Reduce the workload's instance count.
4. D Request a single instance type in one zone at a higher bid.

200. An existing workload's incidents are resolved but the same causes recur. Which solution meets these requirements?

1. A Run structured post-incident reviews that identify contributing causes and track the resulting actions to completion.
2. B Increase the on-call rotation size.
3. C Add more monitoring dashboards.
4. D Record each incident in a ticket and close it on resolution.

201. An existing workload's operational knowledge is held by a small number of engineers. Which solution meets these requirements?

1. A Document the knowledge in a wiki.
2. B Record training sessions with the experienced engineers.
3. C Capture the knowledge as executable runbooks and automation that any responder can use.
4. D Expand the on-call rotation to include more engineers.

202. An existing workload's changes frequently cause incidents. Which solution meets these requirements?

1. A Measure change failure rate and introduce progressive delivery with automated verification before full rollout.
2. B Require more approvals before each change.
3. C Reduce the frequency of changes.
4. D Schedule changes for quiet periods only.

203. An existing workload's operators cannot tell whether a deployment caused a metric change. Which solution meets these requirements?

1. A Review the deployment log alongside the metrics manually.
2. B Annotate the dashboards with deployment events so changes are visible against the metrics.
3. C Deploy less frequently so the cause is clearer.
4. D Add more metrics to the dashboards.

204. An existing workload's operational tasks are performed differently by each engineer. Which solution meets these requirements?

1. A Review the task outcomes weekly.
2. B Encode the tasks as parameterized automation so every execution is identical and recorded.
3. C Publish a standard operating procedure.
4. D Assign each task to a single engineer.

205. An existing workload's operational metrics are collected but never acted on. Which solution meets these requirements?

1. A Collect more metrics for completeness.
2. B Define which metrics have thresholds requiring action and route those to alerts, retiring the rest from the operational view.
3. C Review all metrics at the weekly meeting.
4. D Display all metrics on a larger dashboard.

206. An existing environment has IAM roles whose permissions have grown over time. Which solution meets these requirements?

1. A Replace each role's policy with a minimal policy and restore permissions on failure.
2. B Attach a permissions boundary matching the current policy.
3. C Review each role against its actually exercised permissions using Access Analyzer and remove what is unused.
4. D Delete roles that appear unused.

207. An existing environment must detect credentials that have not been rotated. Which solution meets these requirements?

1. A Require multi-factor authentication for key use.
2. B Review the IAM credential report for key age and rotate or remove those beyond the policy.
3. C Rotate every credential on a fixed schedule regardless of age.
4. D Delete all access keys.

208. An existing environment's S3 buckets must be checked for public exposure. Which solution meets these requirements?

1. A Review the bucket list quarterly.
2. B Review each bucket's policy manually.
3. C Enable Block Public Access on new buckets only.
4. D Enable S3 Block Public Access at the account level and evaluate existing buckets with a Config rule.

209. An existing environment must detect when a resource is created without encryption. Which solution meets these requirements?

1. A Review new resources weekly.
2. B Deploy Config rules for the relevant resource types with automatic remediation or alerting.
3. C Document the encryption requirement.
4. D Rely on service defaults where they exist.

210. An existing environment's network exposure must be assessed without generating traffic. Which solution meets these requirements?

1. A Run a port scan from within the VPC.
2. B Enable VPC Flow Logs and analyse accepted connections.
3. C Run Network Access Analyzer with scopes describing prohibited access and review the findings.
4. D Review the security group rules manually.

211. An existing environment must prevent privilege escalation through role creation. Which solution meets these requirements?

1. A Audit created roles monthly.
2. B Restrict role creation to a central team.
3. C Deny all IAM actions to application teams.
4. D Require a permissions boundary on created roles, enforced by a condition on the role creation permission.

212. An existing environment must confirm no resource policy grants access outside the organization. Which solution meets these requirements?

1. A Enable IAM Access Analyzer with the organization as the zone of trust and review external access findings.
2. B Review each resource policy manually.
3. C Apply a service control policy denying policy changes.
4. D Enable CloudTrail and review cross-account calls.

213. An existing environment's secrets are stored in application configuration files. Which solution meets these requirements?

1. A Migrate the secrets to a managed secret store with rotation and retrieve them at run time.
2. B Rotate the secrets quarterly in the files.
3. C Encrypt the configuration files.
4. D Restrict file permissions on the hosts.

214. An existing environment must ensure security findings are acted on within a defined period. Which solution meets these requirements?

1. A Review the findings dashboard weekly.
2. B Archive findings older than the threshold.
3. C Alert on every new finding.
4. D Track finding age and route findings approaching the threshold to an owner with an escalation path.

215. An existing environment must verify that a control cannot be disabled by an account administrator. Which solution meets these requirements?

1. A Test it by attempting the disable action with an administrator role and confirming it is denied by the organization policy.
2. B Enable alerting on the disable action.
3. C Ask the account owner to confirm.
4. D Review the policy document.

216. An existing environment must reduce the number of principals holding administrative access. Which solution meets these requirements?

1. A Remove administrative access from everyone immediately.
2. B Audit administrative actions monthly.
3. C Require multi-factor authentication for administrative access.
4. D Identify who holds administrative permissions, move routine work to scoped roles, and reserve administrative access for a small set with just-in-time elevation.

217. An existing workload's database queries have degraded as data volume grew. Which solution meets these requirements?

1. A Examine the query plans and indexes against the current data distribution and adjust them.
2. B Increase the provisioned IOPS.
3. C Increase the database instance size.
4. D Add read replicas.

218. An existing workload's caching layer has a low hit rate. Which solution meets these requirements?

1. A Reduce the cache's time to live.
2. B Add more cache nodes.
3. C Analyse which keys are requested and adjust what is cached and for how long, rather than enlarging the cache blindly.
4. D Increase the cache's memory size.

219. An existing workload's requests are slow only for users in one geography. Which solution meets these requirements?

1. A Measure latency by geography and determine whether the distance to the Region or a local network path is responsible.
2. B Increase the database's capacity.
3. C Add more Availability Zones.
4. D Increase the application's instance size.

220. An existing workload's performance varies unpredictably under identical load. Which solution meets these requirements?

1. A Increase every component's capacity.
2. B Reduce the workload's concurrency.
3. C Deploy the workload to a second Region.
4. D Investigate whether a shared or throttled resource such as burst credits, a connection pool, or a rate limit is the constraint.

221. An existing workload's performance improvements must be prioritized. Which solution meets these requirements?

1. A Address every component equally.
2. B Measure where time is actually spent and address the largest contributor first.
3. C Address the components the team is most familiar with.
4. D Address the component with the most code.

222. An existing workload has no measurement of how often it fails to meet its availability target. Which solution meets these requirements?

1. A Define a service level indicator and objective, measure it continuously, and track the error budget consumed.
2. B Count the number of incidents per month.
3. C Measure the infrastructure's uptime.
4. D Review the on-call log monthly.

223. An existing workload's dependencies have not been assessed for their own reliability. Which solution meets these requirements?

1. A Assume each dependency is highly available.
2. B Add retries to every dependency call.
3. C Increase the workload's own capacity.
4. D Map the dependencies, establish each one's availability and failure behaviour, and design for the weakest.

224. An existing workload recovers from failures but the recovery is not verified. Which solution meets these requirements?

1. A Increase the redundancy of each component.
2. B Wait for a real failure to observe the behaviour.
3. C Review the recovery configuration.
4. D Introduce controlled failures with a fault injection experiment and confirm the recovery behaves as designed.

225. An existing workload's failure modes are not documented. Which solution meets these requirements?

1. A Increase monitoring coverage.
2. B Document the incidents that have occurred so far.
3. C List the workload's components.
4. D Run a structured analysis identifying what can fail, how it manifests, and what the response is, then close the gaps found.

226. An existing environment's cost has grown without a corresponding increase in business volume. Which solution meets these requirements?

1. A Reduce every team's budget proportionally.
2. B Negotiate a discount with AWS.
3. C Analyse cost by tag and service over time to identify which components grew, then investigate why.
4. D Delete resources that appear unused.

227. An existing workload's compute cost must be reduced without changing its architecture. Which solution meets these requirements?

1. A Right-size instances against measured utilization and apply commitment discounts to the steady baseline.
2. B Rewrite the workload as serverless functions.
3. C Move the workload to a cheaper Region.
4. D Migrate the workload to containers.

228. An existing environment has resources in Regions where no workload runs. Which solution meets these requirements?

1. A Leave the resources in place in case they are needed.
2. B Identify and remove the resources, then restrict which Regions may be used going forward.
3. C Move the resources to the active Region.
4. D Tag the resources for future review.

229. An existing workload's data transfer cost is significant and its cause is unclear. Which solution meets these requirements?

1. A Enable compression on all responses.
2. B Move the workload to a single Availability Zone.
3. C Reduce the workload's traffic uniformly.
4. D Analyse the Cost and Usage Report by transfer type to identify whether inter-zone, inter-Region, or internet egress dominates.

230. An existing environment's commitment discounts are underused. Which solution meets these requirements?

1. A Review the utilization and coverage reports to identify uncovered eligible usage and unused commitment, then adjust future purchases.
2. B Purchase additional commitments.
3. C Cancel the commitments.
4. D Move workloads to match the commitments.

231. An existing environment must prevent cost from growing unnoticed between reviews. Which solution meets these requirements?

1. A Review the bill at the end of each quarter.
2. B Set a single account-level budget.
3. C Require approval for every resource creation.
4. D Enable anomaly detection and budget alerts routed to the teams that own the spend.