By:
On:
In: SAA-C02
With: 0 Comments

A company that develops web applications has launched hundreds of Application Load Balancers (ALBs) in multiple Regions.The company wants to create an allow list for the IPs of all the load balancers on its firewall device.A solutions architect is looking for a one-time, highly available solution to address this request, which will also help reduce the number of IPs that need to be allowed by the firewall.What should the solutions architect recommend to meet these requirements?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A company is using Amazon Aurora MySQL for a customer relationship management (CRM) application.The application requires frequent maintenance on the database and the Amazon EC2 instances on which the application runs.For AWS Management Console access, the system administrators authenticate againstAWS Identity and Access Management (IAM) using an internal identity provider.For database access, each system administrator has a user name and password that have previously been configured within the database.A recent security audit revealed that the database passwords are not frequently rotated.The company wants to replace the passwords with temporary credentials using the company’s existing AWS access controls.Which set of options will meet the company’s requirements?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

An organization is planning to create a secure scalable application with AWS VPC and ELB.The organization has two instances already running and each instance has an ENI attached to it in addition to a primary network interface.The primary network interface and additional ENI both have an elastic IP attached to it.If those instances are registered with ELB and the organization wants ELB to send data to a particular EIP of the instance, how can they achieve this?Read More →

By:
On:
In: SOA-C01
With: 0 Comments

An organization is running multiple applications for their customers.Each application is deployed by running a base AWS CloudFormation template that configures a new VPC.All applications are run in the same AWS account and AWS Region.A SysOps Administrator has noticed that when trying to deploy the same AWSCloudFormation stack, it fails to deploy.What is likely to be the problem?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company is using a third-party vendor to manage its marketplace analytics.The vendor needs limited programmatic access to resources in the company’s account.All the needed policies have been created to grant appropriate access.Which additional component will provide the vendor with the MOST secure access to the account?Read More →

By:
On:
In: SOA-C01
With: 0 Comments

An organization is concerned that its Amazon RDS databases are not protected.The solution to address this issue must be low cost, protect against table corruption that could be overlooked for several days, and must offer a 30-day window of protection.How can these requirements be met?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company is building an application that gives users the ability to upload video files.The company needs to store the video files securely in Amazon S3 for future access.The total storage requirement for the video files will grow to many petabytes.Users will rarely access the stored video files, but the stored video files must be available within minutes when users request access.The company needs to minimize storage costs.Which S3 storage class should a solutions architect choose to meet these requirements?Read More →