Solutions Architect Associate (Page 101)

A company is required to use cryptographic keys in its on-premises key manager.The key manager is outside of the AWS Cloud because of regulatory and compliance requirements.The company wants to manage encryption and decryption by using cryptographic keys that are retained outside of the AWS Cloud and that support a variety of external key managers from different vendors.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company hosts an application on an Amazon EC2 instance that requires a maximum of 200 GB storage space.The application is used infrequently, with peaks during mornings and evenings.Disk I/O varies, but peaks at 3,000 IOPS.The chief financial officer of the company is concerned about costs and has asked a solutions architect to recommend the most cost-effective storage option that does not sacrifice performance.Which solution should the solutions architect recommend?Read More →

A company is migrating its multi-tier on-premises application to AWS.The application consists of a single-node MySQL database and a multi-node web tier.The company must minimize changes to the application during the migration.The company wants to improve application resiliency after the migration.Which combination of steps will meet these requirements? (Choose two.)Read More →

A recent analysis of a company’s IT expenses highlights the need to reduce backup costs.The company’s chief information officer wants to simplify the on- premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes.The company must preserve the existing investment in the on- premises backup applications and workflows.What should a solutions architect recommend?Read More →

What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?Read More →

A company currently stores symmetric encryption keys in a hardware security module (HSM).A solutions architect must design a solution to migrate key management to AWS.The solution should allow for key rotation and support the use of customer provided keys.Where should the key material be stored to meet these requirements?Read More →

A security audit reveals that Amazon EC2 instances are not being patched regularly.A solutions architect needs to provide a solution that will run regular security scans across a large fleet of EC2 instances.The solution should also patch the EC2 instances on a regular schedule and provide a report of each instance’s patch status.Which solution will meet these requirements?Read More →

An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B.Both are in separate AWS accounts.The network administrator needs to design a solution to configure secure access to EC2 instance in VPC-B from VPC-A.The connectivity should not have a single point of failure or bandwidth concerns.Which solution will meet these requirements?Read More →

A company must migrate 20 TB of data from a data center to the AWS Cloud within 30 days.The company’s network bandwidth is limited to 15 Mbps and cannot exceed 70% utilization.What should a solutions architect do to meet these requirements?Read More →

A company recently launched its website to serve content to its global user base.The company wants to store and accelerate the delivery of static content to its users by leveraging Amazon CloudFront with an Amazon EC2 instance attached as its origin.How should a solutions architect optimize high availability for the application?Read More →