Solutions Architect Professional (Page 114)

A company is migrating some of its applications to AWS.The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies.The company has set up an AWS Direct Connection connection in a central network account.The company expects to have hundreds of AWS accounts and VPCs in the near future.The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs.The company also wants to route its cloud resources to the internet through its on-premises data center.Which combination of steps will meet these requirements? (Choose three.)Read More →

A financial company is building a system to generate monthly, immutable bank account statements for its users.Statements are stored in Amazon S3.Users should have immediate access to their monthly statements for up to 2 years.Some users access their statements frequently, whereas others rarely access their statements.The company’s security and compliance policy requires that the statements be retained for at least 7 years.What is the MOST cost-effective solution to meet the company’s needs?Read More →

A media company is hosting a high-traffic news website on AWS.The website’s front end is based solely on HTML and JavaScript.The company loads all dynamic content by using dynamic asynchronous JavaScript requests to a dedicated backend infrastructure.The front end runs on four Amazon EC2 instances as web servers.The dynamic backend runs in containers on an Amazon Elastic Container Service (AmazonECS) cluster that uses an Auto Scaling group of EC2 instances.The ECS tasks are behind an Application Load Balancer (ALB).Which solutions should a solutions architect recommend to optimize costs? (Choose two.)Read More →

A medical company is running an application in the AWS Cloud.The application simulates the effect of medical drugs in development.The application consists of two parts: configuration and simulation.The configuration part runs in AWS Fargate containers in an Amazon Elastic Container Service(Amazon ECS) cluster.The simulation part runs on large, compute optimized Amazon EC2 instances.Simulations can restart if they are interrupted.The configuration part runs 24 hours a day with a steady load.The simulation part runs only for a few hours each night with a variable load.The company stores simulation results in Amazon S3, and researchers use the results for 30 days.The company must store simulations for 10 years and must be able to retrieve the simulations within 5 hours.Which solution meets these requirements MOST cost-effectively?Read More →

A scientific company needs to process text and image data from an Amazon S3 bucket.The data is collected from several radar stations during a live, time-critical phase of a deep space mission.The radar stations upload the data to the source S3 bucket.The data is prefixed by radar station identification number.The company created a destination S3 bucket in a second account.Data must be copied from the source S3 bucket to the destination S3 bucket to meet a compliance objective.The replication occurs through the use of an S3 replication rule to cover all objects in the source S3 bucket.One specific radar station is identified as having the most accurate data.Data replication at this radar station must be monitored for completion within 30 minutes after the radar station uploads the objects to the source S3 bucket.What should a solutions architect do to meet these requirements?Read More →

To ensure failover capabilities on an elastic network interface (ENI), what should you use for incoming traffic?Read More →

A company wants to ensure that the workloads for each of its business units have complete autonomy and a minimal blast radius in AWS.The Security team must be able to control access to the resources and services in the account to ensure that particular services are not used by the business units.How can a Solutions Architect achieve the isolation requirements?Read More →

A three-tier web application runs on Amazon EC2 instances.Cron daemons are used to trigger scripts that collect the web server, application, and database logs and send them to a centralized location every hour.Occasionally, scaling events or unplanned outages have caused the instances to stop before the latest logs were collected, and the log files were lost.Which of the following options is the MOST reliable way of collecting and preserving the log files?Read More →

A company is running its solution on AWS in a manually created VPC.The company is using AWS CloudFormation to provision other parts of the infrastructure.According to a new requirement, the company must manage all infrastructure in an automatic way.What should the company do to meet this new requirement with the LEAST effort?Read More →

A company is using an Amazon CloudFront distribution to distribute both static and dynamic content from a web application running behind an Application LoadBalancer.The web application requires user authorization and session tracking for dynamic content.The CloudFront distribution has a single cache behavior configured to forward the Authorization, Host, and User-Agent HTTP whitelist headers and a session cookie to the origin.All other cache behavior settings are set to their default value.A valid ACM certificate is applied to the CloudFront distribution with a matching CNAME in the distribution settings.The ACM certificate is also applied to theHTTPS listener for the Application Load Balancer.The CloudFront origin protocol policy is set to HTTPS only.Analysis of the cache statistics report shows that the miss rate for this distribution is very high.What can the Solutions Architect do to improve the cache hit rate for this distribution without causing the SSL/TLS handshake between CloudFront and theApplication Load Balancer to fail?Read More →