Solutions Architect Associate (Page 148)

A company needs to give a globally distributed development team secure access to the company’s AWS resources in a way that complies with security policies.The company currently uses an on-premises Active Directory for internal authentication.The company uses AWS Organizations to manage multiple AWS accounts that support multiple projects.The company needs a solution to integrate with the existing infrastructure to provide centralized identity management and access control.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is developing an application in the AWS Cloud.The application’s HTTP API contains critical information that is published in Amazon API Gateway.The critical information must be accessible from only a limited set of trusted IP addresses that belong to the company’s internal network.Which solution will meet these requirements?Read More →

A company used an Amazon RDS for MySQL DB instance during application testing.Before terminating the DB instance at the end of the test cycle, a solutions architect created two backups.The solutions architect created the first backup by using the mysqldump utility to create a database dump.The solutions architect created the second backup by enabling the final DB snapshot option on RDS termination.The company is now planning for a new test cycle and wants to create a new DB instance from the most recent backup.The company has chosen a MySQL-compatible edition ofAmazon Aurora to host the DB instance.Which solutions will create the new DB instance? (Choose two.)Read More →

A company uses GPS trackers to document the migration patterns of thousands of sea turtles.The trackers check every 5 minutes to see if a turtle has moved more than 100 yards (91.4 meters).If a turtle has moved, its tracker sends the new coordinates to a web application running on three Amazon EC2 instances that are in multiple Availability Zones in one AWS Region.Recently, the web application was overwhelmed while processing an unexpected volume of tracker data.Data was lost with no way to replay the events.A solutions architect must prevent this problem from happening again and needs a solution with the least operational overhead.What should the solutions architect do to meet these requirements?Read More →

A medical company wants to perform transformations on a large amount of clinical trial data that comes from several customers.The company must extract the data from a relational database that contains the customer data.Then the company will transform the data by using a series of complex rules.The company will load the data to Amazon S3 when the transformations are complete.All data must be encrypted where it is processed before the company stores the data in Amazon S3.All data must be encrypted by using customer-specific keys.Which solution will meet these requirements with the LEAST amount of operational effort?Read More →

A company has an Amazon S3 bucket that contains sensitive data files.The company has an application that runs on virtual machines in an on-premises data center.The company currently uses AWS IAM Identity Center.The application requires temporary access to files in the S3 bucket.The company wants to grant the application secure access to the files in the S3 bucket.Which solution will meet these requirements?Read More →

A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon EC2 instance in a public subnet of a VPC.A solutions architect needs to connect from the on-premises network, through the company’s internet connection, to the bastion host, and to the application servers.The solutions architect must make sure that the security groups of all the EC2 instances will allow that access.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A solutions architect is designing a two-tier web application.The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets.The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet.Security is a high priority for the company.How should security groups be configured in this situation? (Choose two.)Read More →

A company wants to move a multi-tiered application from on premises to the AWS Cloud to improve the application’s performance.The application consists of application tiers that communicate with each other by way of RESTful services.Transactions are dropped when one tier becomes overloaded.A solutions architect must design a solution that resolves these issues and modernizes the application.Which solution meets these requirements and is the MOST operationally efficient?Read More →

A company receives 10 TB of instrumentation data each day from several machines located at a single factory.The data consists of JSON files stored on a storage area network (SAN) in an on-premises data center located within the factory.The company wants to send this data to Amazon S3 where it can be accessed by several additional systems that provide critical near-real-time analytics.A secure transfer is important because the data is considered sensitive.Which solution offers the MOST reliable data transfer?Read More →