Solutions Architect Associate (Page 13)

A company runs a latency-sensitive gaming service in the AWS Cloud.The gaming service runs on a fleet of Amazon EC2 instances behind an Application LoadBalancer (ALB).An Amazon DynamoDB table stores the gaming data.All the infrastructure is in a single AWS Region.The main user base is in that same Region.A solutions architect needs to update the architecture to support a global expansion of the gaming service.The gaming service must operate with the least possible latency.Which solution will meet these requirements?Read More →

A solutions architect is designing a two-tiered architecture that includes a public subnet and a database subnet.The web servers in the public subnet must be open to the internet on port 443.The Amazon RDS for MySQL DB instance in the database subnet must be accessible only to the web servers on port 3306.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company has an application that serves clients that are deployed in more than 20,000 retail storefront locations around the world.The application consists of backend web services that are exposed over HTTPS on port 443.The application is hosted on Amazon EC2 instances behind an Application Load Balancer(ALB).The retail locations communicate with the web application over the public internet.The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP.The company’s security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.What should a solutions architect do to meet these requirements?Read More →

A company is concerned about the security of its public web application due to recent web attacks.The application uses an Application Load Balancer (ALB).A solutions architect must reduce the risk of DDoS attacks against the application.What should the solutions architect do to meet this requirement?Read More →

A company runs several websites on AWS for its different brands.Each website generates tens of gigabytes of web traffic logs each day.A solutions architect needs to design a scalable solution to give the company’s developers the ability to analyze traffic patterns across all the company’s websites.This analysis by the developers will occur on demand once a week over the course of several months.The solution must support queries with standard SQL.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has a document management application that contains PDF documents.The company hosts the application on Amazon EC2 instances.According to regulations, the instances must not have access to the internet.The application must be able to read and write to a persistent storage system that provides native versioning capabilities.A solutions architect needs to design secure storage that maximizes resiliency and facilitates data sharing across instances.Which solution meets these requirements?Read More →

The DNS provider that hosts a company’s domain name records is experiencing outages that cause service disruption for a website running on AWS.The company needs to migrate to a more resilient managed DNS service and wants the service to run on AWS.What should a solutions architect do to rapidly migrate the DNS hosting service?Read More →

A company has deployed a serverless application that invokes an AWS Lambda function when new documents are uploaded to an Amazon S3 bucket.The application uses the Lambda function to process the documents.After a recent marketing campaign, the company noticed that the application did not process many of the documents.What should a solutions architect do to improve the architecture of this application?Read More →

A company is deploying a new application on Amazon EC2 instances.The application writes data to Amazon Elastic Block Store (Amazon EBS) volumes.The company needs to ensure that all data that is written to the EBS volumes is encrypted at rest.Which solution will meet this requirement?Read More →

A company has two AWS accounts in the same AWS Region.One account is a publisher account, and the other account is a subscriber account.Each account has its own Amazon S3 bucket.An application puts media objects into the publisher account’s S3 bucket.The objects are encrypted with server-side encryption with customer-provided encryption keys (SSE-C).The company needs a solution that will automatically copy the objects to the subscriber’s account’s S3 bucket.Which solution will meet these requirements with the LEAST operational overhead?Read More →