Solutions Architect Professional (Page 108)

A company deploys a new web application.As part of the setup, the company configures AWS WAF to log to Amazon S3 through Amazon Kinesis Data Firehose.The company develops an Amazon Athena query that runs once daily to return AWS WAF log data from the previous 24 hours.The volume of daily logs is constant.However, over time, the same query is taking more time to run.A solutions architect needs to design a solution to prevent the query time from continuing to increase.The solution must minimize operational overhead.Which solution will meet these requirements?Read More →

A company is offering one of its applications as a multi-tenant software-as-a-service (SaaS) solution.The application has a RESTAPI that runs on a set of AmazonEC2 instances behind an Application Load Balancer (ALB).The instances run in an Auto Scaling group.Last week, one of the tenants ran a campaign that significantly increased traffic to the REST API.The resource constraints affected the performance of other tenants that were running on the same set of EC2 instances.The company wants the ability to throttle API calls for each tenant.Which combination of steps should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company manages an on-premises JavaScript front-end web application.The application is hosted on two servers secured with a corporate Active Directory.The application calls a set of Java-based microservices on an application server and stores data in a clustered MySQL database.The application is heavily used during the day on weekdays.It is lightly used during the evenings and weekends.Daytime traffic to the application has increased rapidly, and reliability has diminished as a result.The company wants to migrate the application to AWS with a solution that eliminates the need for server maintenance, with an API to securely connect to the microservices.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company has implemented a new security requirement.According to the new requirement, the company must scan all traffic from corporate AWS instances in the company’s VPC for violations of the company’s security policies.As a result of these scans, the company can block access to and from specific IP addresses.To meet the new requirement, the company deploys a set of Amazon EC2 instances in private subnets to serve as transparent proxies.The company installs approved proxy server software on these EC2 instances.The company modifies the route tables on all subnets to use the corresponding EC2 instances with proxy software as the default route.The company also creates security groups that are compliant with the security policies and assigns these security groups to the EC2 instances.Despite these configurations, the traffic of the EC2 instances in their private subnets is not being properly forwarded to the internet.What should a solutions architect do to resolve this issue?Read More →

A group of Amazon EC2 instances have been configured as a high performance computing (HPC) cluster.The instances are running in a placement group, and are able to communicate with each other at network speeds of up to 20 Gbps.The cluster needs to communicate with a control EC2 instance outside of the placement group.The control instance has the same instance type and AMI as the other instances, and is configured with a public IP address.How can the Solutions Architect improve the network speeds between the control instance and the instances in the placement group?Read More →

A media company has a video-streaming application that runs on smart TVs.The application is written in HTML and JavaScript.A configuration exists for each smart TV type to control application behavior, such as whether the application should offer high-definition content.The configuration typically changes each quarter.The company serves the application from a fleet of Amazon EC2 instances that handle the requests from the smart TVs.On each request, an application template and smart TV configuration are retrieved from Amazon S3 and are merged to produce the customized application.The company’s current solution produces high response times during peak load.The company wants to use Amazon CloudFront to deliver and cache the application.Which combination of steps should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company is running multiple applications on Amazon EC2.Each application is deployed and managed by multiple business units.All applications are deployed on a single AWS account but on different virtual private clouds (VPCs).The company uses a separate VPC in the same account for test and development purposes.Production applications suffered multiple outages when users accidentally terminated and modified resources that belonged to another business unit.A SolutionsArchitect has been asked to improve the availability of the company applications while allowing the Developers access to the resources they need.Which option meets the requirements with the LEAST disruption?Read More →

A company plans to move regulated and security-sensitive businesses to AWS.The Security team is developing a framework to validate the adoption of AWS best practices and industry-recognized compliance standards.The AWS Management Console is the preferred method for teams to provision resources.Which strategies should a Solutions Architect use to meet the business requirements and continuously assess, audit, and monitor the configurations of AWS resources? (Choose two.)Read More →

A Company had a security event whereby an Amazon S3 bucket with sensitive information was made public.Company policy is to never have public S3 objects, and the Compliance team must be informed immediately when any public objects are identified.How can the presence of a public S3 object be detected, set to trigger alarm notifications, and automatically remediated in the future? (Choose two.)Read More →

A company CFO recently analyzed the company’s AWS monthly bill and identified an opportunity to reduce the cost for AWS Elastic Beanstalk environments in use.The CFO has asked a Solutions Architect to design a highly available solution that will spin up an Elastic Beanstalk environment in the morning and terminate it at the end of the day.The solution should be designed with minimal operational overhead and to minimize costs.It should also be able to handle the increased use of Elastic Beanstalk environments among different teams, and must provide a one-stop scheduler solution for all teams to keep the operational costs low.What design will meet these requirements?Read More →