Solutions Architect Professional (Page 102)

A company has a web service deployed in the following two AWS Regions: us-west-2 and us-est-1.Each AWS region runs an identical version of the web service.Amazon Route 53 is used to route customers to the AWS Region that has the lowest latency.The company wants to improve the availability of the web service in case an outage occurs in one of the two AWS Regions.A Solutions Architect has recommended that a Route 53 health check be performed.The health check must detect a specific text on an endpoint.What combination of conditions should the endpoint meet to pass the Route 53 health check? (Choose two.)Read More →

A large multinational company runs a timesheet application on AWS that is used by staff across the world.The application runs on Amazon EC2 instances in anAuto Scaling group behind an Elastic Load Balancing (ELB) load balancer, and stores data in an Amazon RDS MySQL Multi-AZ database instance.The CFO is concerned about the impact on the business if the application is not available.The application must not be down for more than two hours, but he solution must be as cost-effective as possible.How should the Solutions Architect meet the CFO’s requirements while minimizing data loss?Read More →

A company owns a chain of travel agencies and is running an application in the AWS Cloud.Company employees use the application to search for information about travel destinations.Destination content is updated four times each year.Two fixed Amazon EC2 instances serve the application.The company uses an Amazon Route 53 public hosted zone with a multivalue record of travel.example.com that returns the Elastic IP addresses for the EC2 instances.The application uses Amazon DynamoDB as its primary data store.The company uses a self-hosted Redis instance as a caching solution.During content updates, the load on the EC2 instances and the caching solution increases drastically.This increased load has led to downtime on several occasions.A solutions architect must update the application so that the application is highly available and can handle the load that is generated by the content updates.Which solution will meet these requirements?Read More →

A bank is designing an online customer service portal where customers can chat with customer service agents.The portal is required to maintain a 15-minuteRPO or RTO in case of a regional disaster.Banking regulations require that all customer service chat transcripts must be preserved on durable storage for at least7 years, chat conversations must be encrypted in-flight, and transcripts must be encrypted at rest.The Data Loss Prevention team requires that data at rest must be encrypted using a key that the team controls, rotates, and revokes.Which design meets these requirements?Read More →

A retail company has a custom .NET web application running on AWS that uses Microsoft SQL Server for the database.The application servers maintain a user’s session locally.Which combination of architecture changes are needed to ensure all tiers of the solution are highly available? (Choose three.)Read More →

A company has a standard three-tier architecture using two Availability Zones.During the company’s off season, users report that the website is not working.TheSolutions Architect finds that no changes have been made to the environment recently, the website is reachable, and it is possible to log in.However, when theSolutions Architect selects the `find a store near you` function, the maps provided on the site by a third-party RESTful API call do not work about 50% of the time after refreshing the page.The outbound API calls are made through Amazon EC2 NAT instances.What is the MOST likely reason for this failure and how can it be mitigated in the future?Read More →

A company is running a web application in the AWS Cloud.The application consists of dynamic content that is created on a set of Amazon EC2 instances.TheEC2 instances run in an Auto Scaling group that is configured as a target group for an Application Load Balancer (ALB).The company is using an Amazon CloudFront distribution to distribute the application globally.The CloudFront distribution uses the ALB as an origin.The company uses Amazon Route 53 for DNS and has created an A record of www.example.com for the CloudFront distribution.A solutions architect must configure the application so that itis highly available and fault tolerant.Which solution meets these requirements?Read More →

A company is finalizing the architecture for its backup solution for applications running on AWS.All of the applications run on AWS and use at least two AvailabilityZones in each tier.Company policy requires IT to durably store nightly backups for all its data in at least two locations: production and disaster recovery.The locations must be in different geographic regions.The company also needs the backup to be available to restore immediately at the production data center, and within 24 hours at the disaster recovery location.All backup processes must be fully automated.What is the MOST cost-effective backup solution that will meet all requirements?Read More →

A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway.Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC.Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway.The transit gateway uses its default route table for any VPC attachment.A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company’s other VPCs.A solutions architect needs to limit the traffic between the VPCs.Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs.What should the solutions architect do to meet these requirements?Read More →

A company is deploying a new API to AWS.The API uses Amazon API Gateway with a Regional API endpoint and an AWS Lambda function for hosting.The API retrieves data from an external vendor API, stores data in an Amazon DynamoDB global table, and retrieves data from the DynamoDB global table.The API key for the vendor’s API is stored in AWS Secrets Manager and is encrypted with a customer managed key in AWS Key Management Service (AWS KMS).The company has deployed its own API into a single AWS Region.A solutions architect needs to change the API components of the company’s API to ensure that the components can run across multiple Regions in an active-active configuration.Which combination of changes will meet this requirement with the LEAST operational overhead? (Choose three.)Read More →