Solutions Architect Associate (Page 131)

A company’s containerized application runs on an Amazon EC2 instance.The application needs to download security certificates before it can communicate with other business applications.The company wants a highly secure solution to encrypt and decrypt the certificates in near real time.The solution also needs to store data in highly available storage after the data is encrypted.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A solutions architect is designing a VPC with public and private subnets.The VPC and subnets use IPv4 CIDR blocks.There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability.An internet gateway is used to provide internet access for the public subnets.The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.What should the solutions architect do to enable Internet access for the private subnets?Read More →

A company has an AWS Glue extract, transform, and load (ETL) job that runs every day at the same time.The job processes XML data that is in an Amazon S3 bucket.New data is added to the S3 bucket every day.A solutions architect notices that AWS Glue is processing all the data during each run.What should the solutions architect do to prevent AWS Glue from reprocessing old data?Read More →

A solutions architect must design a highly available infrastructure for a website.The website is powered by Windows web servers that run on Amazon EC2 instances.The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses.Downtime is not acceptable for the website.Which actions should the solutions architect take to protect the website from such an attack? (Choose two.)Read More →

A company is preparing to deploy a new serverless workload.A solutions architect must use the principle of least privilege to configure permissions that will be used to run an AWS Lambda function.An Amazon EventBridge (Amazon CloudWatch Events) rule will invoke the function.Which solution meets these requirements?Read More →

A company is preparing to store confidential data in Amazon S3.For compliance reasons, the data must be encrypted at rest.Encryption key usage must be logged for auditing purposes.Keys must be rotated every year.Which solution meets these requirements and is the MOST operationally efficient?Read More →

A company needs to store data in Amazon S3 and must prevent the data from being changed.The company wants new objects that are uploaded to Amazon S3 to remain unchangeable for a nonspecific amount of time until the company decides to modify the objects.Only specific users in the company’s AWS account can have the ability 10 delete the objects.What should a solutions architect do to meet these requirements?Read More →

A company is building a mobile app on AWS.The company wants to expand its reach to millions of users.The company needs to build a platform so that authorized users can watch the company’s content on their mobile devices.What should a solutions architect recommend to meet these requirements?Read More →

A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour.The files are 1 GB in size.Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is running a critical business application on Amazon EC2 instances behind an Application Load Balancer.The EC2 instances run in an Auto Scaling group and access an Amazon RDS DB instance.The design did not pass an operational review because the EC2 instances and the DB instance are all located in a single Availability Zone.A solutions architect must update the design to use a second Availability Zone.Which solution will make the application highly available?Read More →