Solutions Architect Professional (Page 109)

A company is using AWS CloudFormation to deploy its infrastructure.The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted.How can the company prevent users from accidentally deleting data in this way?Read More →

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →

A company has VPC flow logs enabled for Its NAT gateway.The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance.A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet.The first two octets of the VPC CIDR block are 203.0.Which set of steps should the solutions architect take to meet these requirements?Read More →

A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number(PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →

A company consists or two separate business units.Each business unit has its own AWS account within a single organization in AWS Organizations.The business units regularly share sensitive documents with each other.To facilitate sharing, the company created an Amazon S3 bucket in each account and configured low-way replication between the S3 buckets.The S3 buckets have millions of objects.Recently, a security audit identified that neither S3 bucket has encryption at rest enabled.Company policy requires that all documents must be stored with encryption at rest.The company wants to implement server-side encryption with Amazon S3 managed encryption keys (SSE-S3).What is the MOST operationally efficient solution that meets these requirements?Read More →

A company is planning to migrate an existing high performance computing (HPC) solution to the AWS Cloud.The existing solution consists of a 12-node cluster running Linux with high speed interconnectivity developed on a single rack.A solutions architect needs to optimize the performance of the HPC cluster.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is running an application in the AWS Cloud.The application collects and stores a large amount of unstructured data in an Amazon S3 bucket.The S3 bucket contains several terabytes of data and uses the S3 Standard storage class.The data increases in size by several gigabytes every day.The company needs to query and analyze the data.The company does not access data that is more than 1 year old.However, the company must retain all the data indefinitely for compliance reasons.Which solution will meet these requirements MOST cost-effectively?Read More →

A new startup is running a serverless application using AWS Lambda as the primary source of compute.New versions of the application must be made available to a subset of users before deploying changes to all users.Developers should also have the ability to abort the deployment and have access to an easy rollbackmechanism.A solutions architect decides to use AWS CodeDeploy to deploy changes when a new version is available.Which CodeDeploy configuration should the solutions architect use?Read More →

A solutions architect is creating an application that stores objects in an Amazon S3 bucket.The solutions architect must deploy the application in two AWS Regions that will be used simultaneously.The objects in the two S3 buckets must remain synchronized with each other.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A company is migrating an application to the AWS Cloud.The application runs in an on-premises data center and writes thousands of images into a mounted NFS file system each night.After the company migrates the application, the company will host the application on an Amazon EC2 instance with a mounted AmazonElastic File System (Amazon EFS) file system.The company has established an AWS Direct Connect connection to AWS.Before the migration cutover, a solutions architect must build a process that will replicate the newly created on-premises images to the EFS file system.What is the MOST operationally efficient way to replicate the images?Read More →