Solutions Architect Associate (Page 116)

A company has an application that provides marketing services to stores.The services are based on previous purchases by store customers.The stores upload transaction data to the company through SFTP, and the data is processed and analyzed to generate new marketing offers.Some of the files can exceed 200 GB in size.Recently, the company discovered that some of the stores have uploaded files that contain personally identifiable information (PII) that should not have been included.The company wants administrators to be alerted if PII is shared again.The company also wants to automate remediation.What should a solutions architect do to meet these requirements with the LEAST development effort?Read More →

A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility.However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.How should a solutions architect address this issue?Read More →

A company has a data ingestion workflow that consists of the following:• An Amazon Simple Notification Service (Amazon SNS) topic for notifications about new data deliveries• An AWS Lambda function to process the data and record metadataThe company observes that the ingestion workflow fails occasionally because of network connectivity issues.When such a failure occurs, the Lambda function does not ingest the corresponding data unless the company manually reruns the job.Which combination of actions should a solutions architect take to ensure that the Lambda function ingests all data in the future? (Choose two.)Read More →

A solutions architect is designing a two-tier web application.The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets.The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet.Security is a high priority for the company.How should security groups be configured in this situation? (Choose two.)Read More →

A company has an Amazon S3 bucket that contains critical data.The company must protect the data from accidental deletion.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)Read More →

A company runs a web service on Amazon EC2 instances behind an Application Load Balancer.The instances run in an Amazon EC2 Auto Scaling group across two Availability Zones.The company needs a minimum of four instances at all times to meet the required service level agreement (SLA) while keeping costs low.If an Availability Zone fails, how can the company remain compliant with the SLA?Read More →

A company has an on-premises application that generates a large amount of time-sensitive data that is backed up to Amazon S3.The application has grown and there are user complaints about internet bandwidth limitations.A solutions architect needs to design a long-term solution that allows for both timely backups to Amazon S3 and with minimal impact on internet connectivity for internal users.Which solution meets these requirements?Read More →

A company needs to implement a relational database with a multi-Region disaster recovery Recovery Point Objective (RPO) of 1 second and a Recovery TimeObjective (RTO) of 1 minute.Which AWS solution can achieve this?Read More →

A company runs a highly available image-processing application on Amazon EC2 instances in a single VPC.The EC2 instances run inside several subnets across multiple Availability Zones.The EC2 instances do not communicate with each other.However, the EC2 instances download images from Amazon S3 and upload images to Amazon S3 through a single NAT gateway.The company is concerned about data transfer charges.What is the MOST cost-effective way for the company to avoid Regional data transfer charges?Read More →

A solutions architect must migrate a Windows internet information Services (IIS) web application to AWS.The application currently relies on a file share hosted in the user’s on-premises network-attached storage (NAS).The solutions architected has proposed migrating the IIS web servers to Amazon EC2 instances in multiple Availability Zones that are connected to the storage solution, and configuring an Elastic Load Balancer attached to the instances.Which replacement to the on-premises file share is MOST resilient and durable?Read More →