Solutions Architect Associate (Page 31)

A company is preparing to store confidential data in Amazon S3.For compliance reasons, the data must be encrypted at rest.Encryption key usage must be logged for auditing purposes.Keys must be rotated every year.Which solution meets these requirements and is the MOST operationally efficient?Read More →

A company is preparing to deploy a new serverless workload.A solutions architect must use the principle of least privilege to configure permissions that will be used to run an AWS Lambda function.An Amazon EventBridge (Amazon CloudWatch Events) rule will invoke the function.Which solution meets these requirements?Read More →

A solutions architect must design a highly available infrastructure for a website.The website is powered by Windows web servers that run on Amazon EC2 instances.The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses.Downtime is not acceptable for the website.Which actions should the solutions architect take to protect the website from such an attack? (Choose two.)Read More →

A company has an AWS Glue extract, transform, and load (ETL) job that runs every day at the same time.The job processes XML data that is in an Amazon S3 bucket.New data is added to the S3 bucket every day.A solutions architect notices that AWS Glue is processing all the data during each run.What should the solutions architect do to prevent AWS Glue from reprocessing old data?Read More →

A solutions architect is designing a VPC with public and private subnets.The VPC and subnets use IPv4 CIDR blocks.There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability.An internet gateway is used to provide internet access for the public subnets.The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.What should the solutions architect do to enable Internet access for the private subnets?Read More →

A company’s containerized application runs on an Amazon EC2 instance.The application needs to download security certificates before it can communicate with other business applications.The company wants a highly secure solution to encrypt and decrypt the certificates in near real time.The solution also needs to store data in highly available storage after the data is encrypted.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is implementing a shared storage solution for a gaming application that is hosted in an on-premises data center.The company needs the ability to use Lustre clients to access data.The solution must be fully managed.Which solution meets these requirements?Read More →

An image-processing company has a web application that users use to upload images.The application uploads the images into an Amazon S3 bucket.The company has set up S3 event notifications to publish the object creation events to an Amazon Simple Queue Service (Amazon SQS) standard queue.The SQS queue serves as the event source for an AWS Lambda function that processes the images and sends the results to users through email.Users report that they are receiving multiple email messages for every uploaded image.A solutions architect determines that SQS messages are invoking the Lambda function more than once, resulting in multiple email messages.What should the solutions architect do to resolve this issue with the LEAST operational overhead?Read More →

A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage.The company wants to migrate this workload to the AWS Cloud and is considering various storage options.The storage solution must be highly available and integrated with Active Directory for access control.Which solution will satisfy these requirements?Read More →

A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS).The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours.The file system needs to provide a mount target m each Availability Zone within a Region.A solutions architect wants to use AWS Backup to manage the replication to another Region.Which solution will meet these requirements?Read More →