Solutions Architect Associate (Page 78)

A company uses an Amazon S3 bucket to store static images for its website.The company configured permissions to allow access to Amazon S3 objects by privileged users only.What should a solutions architect do to protect against data loss? (Choose two.)Read More →

A company has an application that serves clients that are deployed in more than 20.000 retail storefront locations around the world.The application consists of backend web services that are exposed over HTTPS on port 443.The application is hosted on Amazon EC2 instances behind an Application Load Balancer (ALB).The retail locations communicate with the web application over the public internet.The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP.The company’s security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.What should a solutions architect do to meet these requirements?Read More →

An operations team has a standard that states IAM policies should not be applied directly to users.Some new team members have not been following this standard.The operations manager needs a way to easily identify the users with attached policies.What should a solutions architect do to accomplish this?Read More →

A company hosts a three-tier web application in the AWS Cloud.A Multi-AZAmazon RDS for MySQL server forms the database layer Amazon ElastiCache forms the cache layer.The company wants a caching strategy that adds or updates data in the cache when a customer adds an item to the database.The data in the cache must always match the data in the database.Which solution will meet these requirements?Read More →

A company wants to use an AWS Region as a disaster recovery location for its on-premises infrastructure.The company has 10 TB of existing data, and the on- premise data center has a 1 Gbps internet connection.A solutions architect must find a solution so the company can have its existing data on AWS in 72 hours without transmitting it using an unencrypted channel.Which solution should the solutions architect select?Read More →

A company that uses AWS is building an application to transfer data to a product manufacturer.The company has its own identity provider (IdP).The company wants the IdP to authenticate application users while the users use the application to transfer data.The company must use Applicability Statement 2 (AS2) protocol.Which solution will meet these requirements?Read More →

A company is building applications in containers.The company wants to migrate its on-premises development and operations services from its on-premises data center to AWS.Management states that production systems must be cloud agnostic and use the same configuration and administrator tools across production systems.A solutions architect needs to design a managed solution that will align open-source software.Which solution meets these requirements?Read More →

A company has resources across multiple AWS Regions and accounts.A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory.The solutions architect needs to build and map the relationship details of the various workloads across all accounts.Which solution will meet these requirements in the MOST operationally efficient way?Read More →

A company hosts its website on AWS.To address the highly variable demand, the company has implemented Amazon EC2 Auto Scaling.Management is concerned that the company is over-provisioning its infrastructure, especially at the front end of the three-tier application.A solutions architect needs to ensure costs are optimized without impacting performance.What should the solutions architect do to accomplish this?Read More →

A company runs an application on Amazon EC2 Linux instances across multiple Availability Zones.The application needs a storage layer that is highly available and Portable Operating System Interface (POSIX)-compliant.The storage layer must provide maximum data durability and must be shareable across the EC2 instances.The data in the storage layer will be accessed frequently for the first 30 days and will be accessed infrequently after that time.Which solution will meet these requirements MOST cost-effectively?Read More →