Solutions Architect Associate (Page 69)

A company develops applications in separate AWS accounts that are all part of an organization in AWS Organizations.An operations team creates an IAM user for each developer for a given application.As the company has grown, the number of applications has increased.Developers now work on several applications and need to view and access all their project accounts.A solutions architect must design a solution that minimizes the operational overhead for the operations team.What should the solutions architect do to meet these requirements?Read More →

An ecommerce company stores terabytes of customer data in the AWS Cloud.The data contains personally identifiable information (PII).The company wants to use the data in three applications.Only one of the applications needs to process the PII.The PII must be removed before the other two applications process the data.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A survey company has gathered data for several years from areas in the United States.The company hosts the data in an Amazon S3 bucket that is 3 TB in size and growing.The company has started to share the data with a European marketing firm that has S3 buckets.The company wants to ensure that its data transfer costs remain as low as possible.Which solution will meet these requirements?Read More →

A company hosts a web application on multiple Amazon EC2 instances.The EC2 instances are in an Auto Scaling group that scales in response to user demand.The company wants to optimize cost savings without making a long-term commitment.Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements?Read More →

A company is expanding a secure, on-premises network to AWS. The on-premises network has no direct internet access. The company is setting up am AWSDirect Connect connection between the on-premises network and AWS. An application that runs in the on-premises network needs to use the AWS software development kits (SDKs).A solutions architect must design a solution that supports this connectivity. However, the solution cannot incur additional cost beyond the cost of the DirectConnect connection.Which solution will meet these requirements?Read More →

A software company needs to upgrade a critical web application.The application currently runs on a single Amazon EC2 instance that the company hosts in a public subnet.The EC2 instance runs a MySQL database.The application’s DNS records are published in an Amazon Route 53 zone.A solutions architect must reconfigure the application to be scalable and highly available.The solutions architect must also reduce MySQL read latency.Which combination of solutions will meet these requirements? (Choose two.)Read More →

To meet security requirements, a company needs to encrypt all of its application data in transit while communicating with an Amazon RDS MySQL DB instance.A recent security audit revealed that encryption at rest is enabled using AWS Key Management Service (AWS KMS), but data in transit is not enabled.What should a solutions architect do to satisfy the security requirements?Read More →

The DNS provider that hosts a company’s domain name records is experiencing outages that cause service disruption for a website running on AWS.The company needs to migrate to a more resilient managed DNS service and wants the service to run on AWS.What should a solutions architect do to rapidly migrate the DNS hosting service?Read More →

A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region.A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks.Which solution will meet these requirements with the LEAST amount of administrative effort?Read More →

A company’s application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC.The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC.The company wants to send the information to Amazon OpenSearch Service for analysis.Which solution will meet these requirements?Read More →