Solutions Architect Associate (Page 87)

A company is preparing to store confidential data in Amazon S3.For compliance reasons, the data must be encrypted at rest.Encryption key usage must be logged for auditing purposes.Keys must be rotated every year.Which solution meets these requirements and is the MOST operationally efficient?Read More →

A company has a mobile app for customers.The app’s data is sensitive and must be encrypted at rest.The company uses AWS Key Management Service (AWS KMS).The company needs a solution that prevents the accidental deletion of KMS keys.The solution must use Amazon Simple Notification Service (Amazon SNS) to send an email notification to administrators when a user attempts to delete a KMS key.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has a three-tier environment on AWS that ingests sensor data from its users’ devices.The traffic flows through a Network Load Balancer (NLB) then toAmazon EC2 instances for the web tier, and finally toEC2 instances for the application tier that makes database calls.What should a solutions architect do to improve the security of data in transit to the web tier?Read More →

A company has AWS Lambda functions that use environment variables.The company does not want its developers to see environment variables in plaintext.Which solution will meet these requirements?Read More →

A company has an API-based inventory reporting application running on Amazon EC2 instances.The application stores information in an Amazon DynamoDB table.The company’s distribution centers have an on-premises shipping application that calls an API to update the inventory before printing shipping labels.The company has been experiencing application interruptions several times each day, resulting in lost transactions.What should a solutions architect recommend to improve application resiliency?Read More →

A company needs a solution to prevent AWS CloudFormation stacks from deploying AWS Identity and Access Management (IAM) resources that include an inline policy or “*” in the statement.The solution must also prohibit deployment of Amazon EC2 instances with public IP addresses.The company has AWS Control Tower enabled in its organization in AWS Organizations.Which solution will meet these requirements?Read More →

A company has a website deployed on AWS.The database backend is hosted on Amazon RDS for MySQL with a primary instance and five read replicas to support scaling needs.The read replicas should lag no more than 1 second behind the primary instance to support the user experience.As traffic on the website continues to increase, the replicas are falling further behind during periods of peak load, resulting in complaints from users when searches yield inconsistent results.A solutions architect needs to reduce the replication lag as much as possible, with minimal changes to the application code or operational requirements.Which solution meets these requirements?Read More →

A company runs a production database on Amazon RDS for MySQL.The company wants to upgrade the database version for security compliance reasons.Because the database contains critical data, the company wants a quick solution to upgrade and test functionality without losing any data.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A mobile gaming company runs application servers on Amazon EC2 instances.The servers receive updates from players every 15 minutes.The mobile game creates a JSON object of the progress made in the game since the last update, and sends the JSON object to an Application Load Balancer.As the mobile game is played, game updates are being lost.The company wants to create a durable way to get the updates in older.What should a solutions architect recommend to decouple the system?Read More →

A solutions architect is designing a user authentication solution for a company.The solution must invoke two-factor authentication for users that log in from inconsistent geographical locations, IP addresses, or devices.The solution must also be able to scale up to accommodate millions of users.Which solution will meet these requirements?Read More →