Solutions Architect Professional (Page 114)

A company is running a containerized application in the AWS Cloud.The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group.The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images.When a new image version is uploaded, the new image version receives a unique tag.The company needs a solution that inspects new image versions for common vulnerabilities and exposures.The solution must automatically delete new image tags that have Critical or High severity findings.The solution also must notify the development team when such a deletion occurs.Which solution meets these requirements?Read More →

A solutions architect is implementing federated access to AWS for users of the company’s mobile application.Due to regulatory and security requirements, the application must use a custom-built solution for authenticating users and must use IAM roles for authorization.Which of the following actions would enable authentication and authorization and satisfy the requirements? (Choose two.)Read More →

An international delivery company hosts a delivery management system on AWS.Drivers use the system to upload confirmation of delivery.Confirmation includes the recipient’s signature or a photo of the package with the recipient.The driver’s handheld device uploads signatures and photos through FTP to a single Amazon EC2 instance.Each handheld device saves a file in a directory based on the signed-in user, and the file name matches the delivery number.The EC2 instance then adds metadata to the file after querying a central database to pull delivery information.The file is then placed in Amazon S3 for archiving.As the company expands, drivers report that the system is rejecting connections.The FTP server is having problems because of dropped connections and memory issues in response to these problems, a system engineer schedules a cron task to reboot the EC2 instance every 30 minutes.The billing team reports that files are not always in the archive and that the central system is not always updated.A solutions architect needs to design a solution that maximizes scalability to ensure that the archive always receives the files and that systems are always updated.The handheld devices cannot be modified, so the company cannot deploy a new application.Which solution will meet these requirements?Read More →

A company has several applications running in an on-premises data center.The data center runs a mix of Windows and Linux VMs managed by VMware vCenter.A solutions architect needs to create a plan to migrate the applications to AWS.However, the solutions architect discovers that the document for the applications is not up to date and that there are no complete infrastructure diagrams.The company’s developers lack time to discuss their applications and current usage with the solutions architect.What should the solutions architect do to gather the required information?Read More →

A company wants to migrate its website from an on-premises data center onto AWS.At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency.The company’s security policy states that privileges and network permissions must be configured according to best practice, using least privilege.A solutions architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster.What steps are required after the deployment to meet the requirements? (Choose two.)Read More →

A Solutions Architect is designing a deployment strategy for an application tier and has the following requirements:✑ The application code will need a 500 GB static dataset to be present before application startup.✑ The application tier must be able to scale up and down based on demand with as little startup time as possible.✑ The Development team should be able to update the code multiple times each day.✑ Critical operating system (OS) patches must be installed within 48 hours of being released.Which deployment strategy meets these requirements?Read More →

A company provides a software as a service (SaaS) application that runs in the AWS Cloud.The application runs on Amazon EC2 instances behind a Network Load Balancer (NLB).The instances are in an Auto Scaling group and are distributed across three Availability Zones in a single AWS Region.The company is deploying the application into additional Regions.The company must provide static IP addresses for the application to customers so that the customers can add the IP addresses to allow lists.The solution must automatically route customers to the Region that is geographically closest to them.Which solution will meet these requirements?Read More →

A company is running a large containerized workload in the AWS Cloud.The workload consists of approximately 100 different services.The company usesAmazon Elastic Container Service (Amazon ECS) to orchestrate the workload.Recently, the company’s development team started using AWS Fargate instead of Amazon EC2 instances in the ECS cluster.In the past, the workload has come close to running the maximum number of EC2 instances that are available in the account.The company is worried that the workload could reach the maximum number of ECS tasks that are allowed.A solutions architect must implement a solution that will notify the development team when Fargate reaches 80% of the maximum number of tasks.What should the solutions architect do to meet this requirement?Read More →

A company hosts a web application on AWS in the us-east-1 Region.The application servers are distributed across three Availability Zones behind an Application Load Balancer.The database is hosted in a MySQL database on an Amazon EC2 instance.A solutions architect needs to design a cross-Region data recovery solution using AWS services with an RTO of less than 5 minutes and an RPO of less than 1 minute.The solutions architect is deploying application servers in us-west-2, and has configured Amazon Route 53 health checks and DNS failover to us-west-2.Which additional step should the solutions architect take?Read More →

A life sciences company is using a combination of open source tools to manage data analysis workflows and Docker containers running on servers in its on- premises data center to process genomics data.Sequencing data is generated and stored on a local storage area network (SAN), and then the data is processed.The research and development teams are running into capacity issues and have decided to re-architect their genomics analysis platform on AWS to scale based on workload demands and reduce the turnaround time from weeks to days.The company has a high-speed AWS Direct Connect connection.Sequencers will generate around 200 GB of data for each genome, and individual jobs can take several hours to process the data with ideal compute capacity.The end result will be stored in Amazon S3.The company is expecting 10-15 job requests each day.Which solution meets these requirements?Read More →