Solutions Architect Associate (Page 42)

A media company uses an Amazon CloudFront distribution to deliver content over the internet.The company wants only premium customers to have access to the media streams and file content.The company stores all content in an Amazon S3 bucket.The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads.Which solution will meet these requirements?Read More →

A company stores raw collected data in an Amazon S3 bucket.The data is used for several types of analytics on behalf of the company’s customers.The type of analytics requested determines the access pattern on the S3 objects.The company cannot predict or control the access pattern.The company wants to reduce its S3 costs.Which solution will meet these requirements?Read More →

A company is hosting a web application from an Amazon S3 bucket.The application uses Amazon Cognito as an identity provider to authenticate users and return a JSON Web Token (JWT) that provides access to protected resources that are stored in another S3 bucket.Upon deployment of the application, users report errors and are unable to access the protected content.A solutions architect must resolve this issue by providing proper permissions so that users can access the protected content.Which solution meets these requirements?Read More →

A company is looking for a solution that can store video archives in AWS from old news footage.The company needs to minimize costs and will rarely need to restore these files.When the files are needed, they must be available in a maximum of five minutes.What is the MOST cost-effective solution?Read More →

A development team has launched a new application that is hosted on Amazon EC2 instances inside a development VPC.A solutions architect needs to create a new VPC in the same account.The new VPC will be peered with the development VPC.The VPC CIDR block for the development VPC is 192.168.0.0/24.The solutions architect needs to create a CIDR block for the new VPC.The CIDR block must be valid for a VPC peering connection to the development VPC.What is the SMALLEST CIDR block that meets these requirements?Read More →

A company needs to minimize the cost of its 1 Gbps AWS Direct Connect connection.The company’s average connection utilization is less than 10%.A solutions architect must recommend a solution that will reduce the cost without compromising security.Which solution will meet these requirements?Read More →

A solutions architect must secure a VPC network that hosts Amazon EC2 instances.The EC2 instances contain highly sensitive data and run in a private subnet.According to company policy, the EC2 instances that run in the VPC can access only approved third-party software repositories on the internet for software product updates that use the third party’s URL.Other internet traffic must be blocked.Which solution meets these requirements?Read More →

A research laboratory needs to process approximately 8 TB of data.The laboratory requires sub-millisecond latencies and a minimum throughput of 6 GBps for the storage subsystem.Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data.Which solution will meet the performance requirements?Read More →

A solutions architect is creating a new VPC design.There are two public subnets for the load balancer, two private subnets for web servers, and two private subnets for MySQL.The web servers use only HTTPS.The solutions architect has already created a security group for the load balancer allowing port 443 from 0.0.0.0/0.Company policy requires that each resource has the least access required to still be able to perform its tasks.Which additional configuration strategy should the solutions architect use to meet these requirements?Read More →

A company runs an environment where data is stored in an Amazon S3 bucket.The objects are accessed frequently throughout the day.The company has strict da ta encryption requirements for data that is stored in the S3 bucket.The company currently uses AWS Key Management Service (AWS KMS) for encryption.The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS.Which solution will meet these requirements?Read More →