Solutions Architect Professional (Page 105)

A company needs to migrate its customer transactions database from on premises to AWS.The database resides on an Oracle DB instance that runs on a Linux server.According to a new security requirement, the company must rotate the database password each year.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is having issues with a newly deployed serverless infrastructure that uses Amazon API Gateway, Amazon Lambda, and Amazon DynamoDB.In a steady state, the application performs as expected.However, during peak load, tens of thousands of simultaneous invocations are needed and user requests fail multiple times before succeeding.The company has checked the logs for each component, focusing specifically on Amazon CloudWatch Logs for Lambda.There are no errors logged by the services or applications.What might cause this problem?Read More →

A company has five development teams that have each created five AWS accounts to develop and host applications.To track spending, the development teams log in to each account every month, record the current cost from the AWS Billing and Cost Management console, and provide the information to the company’s finance team.The company has strict compliance requirements and needs to ensure that resources are created only in AWS Regions in the United States.However, some resources have been created in other Regions.A solutions architect needs to implement a solution that gives the finance team the ability to track and consolidate expenditures for all the accounts.The solution also must ensure that the company can create resources only in Regions in the United States.Which combination of steps will meet these requirements in the MOST operationally efficient way? (Choose three.)Read More →

During a security audit of a Service team’s application, a Solutions Architect discovers that a username and password for an Amazon RDS database and a set ofAWS IAM user credentials can be viewed in the AWS Lambda function code.The Lambda function uses the username and password to run queries on the database, and it uses the IAM credentials to call AWS services in a separate management account.The Solutions Architect is concerned that the credentials could grant inappropriate access to anyone who can view the Lambda code.The management account and the Service team’s account are in separate AWS Organizations organizational units (OUs).Which combination of changes should the Solutions Architect make to improve the solution’s security? (Choose two.)Read More →

A solutions architect is investigating an issue in which a company cannot establish new sessions in Amazon Workspaces.An initial analysis indicates that the issue involves user profiles.The Amazon Workspaces environment is configured to use Amazon FSx for Windows File Server as the profile share storage.The FSx for Windows File Server file system is configured with 10 TB of storage.The solutions architect discovers that the file system has reached Its maximum capacity.The solutions architect must ensure that users can regain access.The solution also must prevent the problem from occurring again.Which solution will meet these requirements?Read More →

A solutions architect is implementing infrastructure as code for a two-tier web application in an AWS CloudFormation template.The web frontend application will be deployed on Amazon EC2 instances in an Auto Scaling group.The backend database will be an Amazon RDS for MySQL DB instance.The database password will be rotated every 60 days.How can the solutions architect MOST securely manage the configuration of the application’s database credentials?Read More →

A company runs its sales reporting application in an AWS Region in the United States.The application uses an Amazon API Gateway Regional API and AWS Lambda functions to generate on-demand reports from data in an Amazon RDS for MySQL database.The frontend of the application is hosted on Amazon S3 and is accessed by users through an Amazon CloudFront distribution.The company is using Amazon Route 53 as the DNS service for the domain.Route 53 is configured with a simple routing policy to route traffic to the API Gateway API.In the next 6 months, the company plans to expand operations to Europe.More than 90% of the database traffic is read-only traffic.The company has already deployed an API Gateway API and Lambda functions in the new Region.A solutions architect must design a solution that minimizes latency for users who download reports.Which solution will meet these requirements?Read More →

A company has built a high performance computing (HPC) cluster in AWS for a tightly coupled workload that generates a large number of shared files stored inAmazon EFS.The cluster was performing well when the number of Amazon EC2 instances in the cluster was 100.However, when the company increased the cluster size to 1,000 EC2 instances, overall performance was well below expectations.Which collection of design choices should a solutions architect make to achieve the maximum performance from the HPC cluster? (Choose three.)Read More →

A company has an application that generates reports and stores them in an Amazon S3 bucket.When a user accesses their report, the application generates a signed URL to allow the user to download the report.The company’s security team has discovered that the files are public and that anyone can download them without authentication.The company has suspended the generation of new reports until the problem is resolved.Which set of actions will immediately remediate the security issue without impacting the application’s normal workflow?Read More →

Your company hosts a social media site supporting users in multiple countries. You have been asked to provide a highly available design tor the application that leverages multiple regions tor the most recently accessed content and latency sensitive portions of the wet) site The most latency sensitive component of the application involves reading user preferences to support web site personalization and ad selection.In addition to running your application in multiple regions, which option will support this application’s requirements?Read More →