Solutions Architect Professional (Page 106)

A company has many services running in its on-premises data center.The data center is connected to AWS using AWS Direct Connect (DX) and an IPSec VPN.The service data is sensitive and connectivity cannot traverse the internet.The company wants to expand into a new market segment and begin offering its services to other companies that are using AWS.Which solution will meet these requirements?Read More →

A company runs an application in the cloud that consists of a database and a website.Users can post data to the website, have the data processed, and have the data sent back to them in an email.Data is stored in a MySQL database running on an Amazon EC2 instance.The database is running in a VPC with two private subnets.The website is running on Apache Tomcat in a single EC2 instance in a different VPC with one public subnet.There is a single VPC peering connection between the database and website VPC.The website has suffered several outages during the last month due to high traffic.Which actions should a solutions architect take to increase the reliability of the application? (Choose three.)Read More →

A financial services company is moving to AWS and wants to enable developers to experiment and innovate while preventing access to production applications.The company has the following requirements:✑ Production workloads cannot be directly connected to the internet.✑ All workloads must be restricted to the us-west-2 and eu-central-1 Regions.✑ Notification should be sent when developer sandboxes exceed $500 in AWS spending monthly.Which combination of actions needs to be taken to create a multi-account structure that meets the company’s requirements? (Choose three.)Read More →

A Solutions Architect is designing the storage layer for a recently purchased application.The application will be running on Amazon EC2 instances and has the following layers and requirements:✑ Data layer: A POSIX file system shared across many systems.✑ Service layer: Static file content that requires block storage with more than 100k IOPS.Which combination of AWS services will meet these needs? (Choose two.)Read More →

A company is using AWS CloudFormation as its deployment tool for all application.It stages all application binaries and templates within Amazon S3 bucket with versioning enabled.Developers have access to an Amazon EC2 instance that hosts the integrated development (IDE).The Developers download the application binaries from Amazon S3 to the EC2 instance, make changes, and upload the binaries to an S3 bucket after running the unit tests locally.The developers want to improve the existing deployment mechanism and implement CI/CD using AWS CodePipeline.The developers have the following requirements:✑ Use AWS CodeCommit for source control.✑ Automate unit testing and security scanning.✑ Alert the Developers when unit tests fail.✑ Turn application features on and off, and customize deployment dynamically as part of CI/CD.✑ Have the lead Developer provide approval before deploying an application.Which solution will meet these requirements?Read More →

A company ingests and processes streaming market data.The data rate is constant.A nightly process that calculates aggregate statistics is run, and each execution takes about 4 hours to complete.The statistical analysis is not mission critical to the business, and previous data points are picked up on the next execution if a particular run fails.The current architecture uses a pool of Amazon EC2 Reserved Instances with 1-year reservations running full time to ingest and store the streaming data in attached Amazon EBS volumes.On-Demand EC2 instances are launched each night to perform the nightly processing, accessing the stored data from NFS shares on the ingestion servers, and terminating the nightly processing servers when complete.The Reserved Instance reservations are expiring, and the company needs to determine whether to purchase new reservations or implement a new design.Which is the most cost-effective design?Read More →

A European online newspaper service hosts its public-facing WordPress site in a collocated data center in London.The current WordPress infrastructure consists of a load balancer, two web servers, and one MySQL database server.A solutions architect is tasked with designing a solution with the following requirements:✑ Improve the website’s performance✑ Make the web tier scalable and stateless✑ Improve the database server performance for read-heavy loads✑ Reduce latency for users across Europe and the US✑ Design the new architecture with a goal of 99.9% availabilityWhich solution meets these requirements while optimizing operational efficiency?Read More →

An ecommerce company has an order processing application it wants to migrate to AWS.The application has inconsistent data volume patterns, but needs to be avail at all times.Orders must be processed as they occur and in the order that they are received.Which set of steps should a solutions architect take to meet these requirements?Read More →

A company is using multiple AWS accounts.The DNS records are stored in a private hosted zone for Amazon Route 53 in Account A.The company’s applications and databases are running in Account B.A solutions architect will deploy a two-tier application in a new VPC.To simplify the configuration, the db.example.com CNAME record set for the Amazon RDS endpoint was created in a private hosted zone for Amazon Route 53.During deployment, the application failed to start.Troubleshooting revealed that db.example.com is not resolvable on the Amazon EC2 instance.The solutions architect confirmed that the record set was created correctly in Route 53.Which combination of steps should the solutions architect take to resolve this issue? (Choose two.)Read More →

An AWS partner company is building a service in AWS Organizations using its organization named org1.This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2.The company must establish least privilege security access using an API or command line tool to the customer account.What is the MOST secure way to allow org1 to access resources in org2?Read More →