Solutions Architect Professional (Page 111)

A security engineer determined that an existing application retrieves credentials to an Amazon RDS for MySQL database from an encrypted file in Amazon S3.For the next version of the application, the security engineer wants to implement the following application design changes to improve security:✑ The database must use strong, randomly generated passwords stored in a secure AWS managed service.✑ The application resources must be deployed through AWS CloudFormation.✑ The application must rotate credentials for the database every 90 days.A solutions architect will generate a CloudFormation template to deploy the application.Which resources specified in the CloudFormation template will meet the security engineer’s requirements with the LEAST amount of operational overhead?Read More →

A data analytics company has an Amazon Redshift cluster that consists of several reserved nodes.The cluster is experiencing unexpected bursts of usage because a team of employees is compiling a deep audit analysis report.The queries to generate the report are complex read queries and are CPU intensive.Business requirements dictate that the cluster must be able to service read and write queries at all times.A solutions architect must devise a solution that accommodates the bursts of usage.Which solution meets these requirements MOST cost-effectively?Read More →

A company is using Amazon WorkSpaces to provide access to its corporate applications across multiple global locations.User profile data is stored on anAmazon FSx for Windows File Server file system that is configured with a DNS alias.The file system is linked to an existing Active Directory service.Recently, the company added a new application that unexpectedly caused user profiles to grow significantly.The company increased the FSx for Windows FileServer file system size from 3 TiB to 6 TiB to prevent any issues.A few days later, the company made changes to the application’s configuration.The user profile storage usage decreased significantly, leaving a large amount of free space on the file system.A solutions architect needs to reduce the size of the file system to avoid unnecessary costs.What should the solutions architect do to achieve this goal?Read More →

A company has multiple business units.Each business unit has its own AWS account and runs a single website within that account.The company also has a single logging account.Logs from each business unit website are aggregated into a single Amazon S3 bucket in the logging account.The S3 bucket policy provides each business unit with access to write data into the bucket and requires data to be encrypted.The company needs to encrypt logs uploaded into the bucket using a single AWS Key Management Service (AWS KMS) CMK.The CMK that protects the data must be rotated once every 365 days.Which strategy is the MOST operationally efficient for the company to use to meet these requirements?Read More →

A company operates a fleet of servers on premises and operates a fleet of Amazon EC2 instances in its organization in AWS Organizations.The company’s AWS accounts contain hundreds of VPCs.The company wants to connect its AWS accounts to its on-premises network.AWS Site-to-Site VPN connections are already established to a single AWS account.The company wants to control which VPCs can communicate with other VPCs.Which combination of steps will achieve this level of control with the LEAST operational effort? (Choose three.)Read More →

An international delivery company hosts a delivery management system on AWS.Drivers use the system to upload confirmation of delivery.Confirmation includes the recipient’s signature or a photo of the package with the recipient.The driver’s handheld device uploads signatures and photos through FTP to a single Amazon EC2 instance.Each handheld device saves a file in a directory based on the signed-in user, and the file name matches the delivery number.The EC2 instance then adds metadata to the file after querying a central database to pull delivery information.The file is then placed in Amazon S3 for archiving.As the company expands, drivers report that the system is rejecting connections.The FTP server is having problems because of dropped connections and memory issues.In response to these problems, a system engineer schedules a cron task to reboot the EC2 instance every 30 minutes.The billing team reports that files are not always in the archive and that the central system is not always updated.A solutions architect needs to design a solution that maximizes scalability to ensure that the archive always receives the files and that systems are always updated.The handheld devices cannot be modified, so the company cannot deploy a new application.Which solution will meet these requirements?Read More →

You are the new IT architect in a company that operates a mobile sleep tracking application.When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to your backend.The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB table.Every morning, you scan the table to extract and aggregate last night’s data on a per user basis, and store the results in Amazon S3.Users are notified viaAmazon SNS mobile push notifications that new data is available, which is parsed and visualized by the mobile app.Currently you have around 100k users who are mostly based out of North America.You have been tasked to optimize the architecture of the backend system to lower cost.What would you recommend? (Choose two.)Read More →

You have been asked to design the storage layer for an application.The application requires disk performance of at least 100,000 IOPS.In addition, the storage layer must be able to survive the loss of an individual disk, EC2 instance, or Availability Zone without any data loss.The volume you provide must have a capacity of at least 3 TB.Which of the following designs will meet these objectives?Read More →

You have a periodic image analysis application that gets some files in input, analyzes them and tor each file writes some data in output to a ten file the number of files in input per day is high and concentrated in a few hours of the day.Currently you have a server on EC2 with a large EBS volume that hosts the input data and the results. It takes almost 20 hours per day to complete the process.What services could be used to reduce the elaboration time and improve the availability of the solution?Read More →

You are designing a photo-sharing mobile app.The application will store all pictures in a single Amazon S3 bucket.Users will upload pictures from their mobile device directly to Amazon S3 and will be able to view and download their own pictures directly from Amazon S3.You want to configure security to handle potentially millions of users in the most secure manner possible.What should your server-side application do when a new user registers on the photo-sharing mobile application?Read More →