Solutions Architect Professional (Page 118)

A weather service provides high-resolution weather maps from a web application hosted on AWS in the eu-west-1 Region.The weather maps are updated frequently and stored in Amazon S3 along with static HTML content.The web application is fronted by Amazon CloudFront.The company recently expanded to serve users in the us-east-1 Region, and these new users report that viewing their respective weather maps is slow from time to time.Which combination of steps will resolve the us-east-1 performance issues? (Choose two.)Read More →

A solutions architect is designing a publicly accessible web application that is on an Amazon CloudFront distribution with an Amazon S3 website endpoint as the origin.When the solution is deployed, the website returns an Error 403: Access Denied message.Which steps should the solutions architect take to correct the issue? (Choose two.)Read More →

A mobile app has become very popular, and usage has gone from a few hundred to millions of users.Users capture and upload images of activities within a city, and provide ratings and recommendations.Data access patterns are unpredictable.The current application is hosted on Amazon EC2 instances behind anApplication Load Balancer (ALB).The application is experiencing slowdowns and costs are growing rapidly.Which changes should a solutions architect make to the application architecture to control costs and improve performance?Read More →

A web application is hosted in a dedicated VPC that is connected to a company’s on-premises data center over a Site-to-Site VPN connection.The application is accessible from the company network only.This is a temporary non-production application that is used during business hours.The workload is generally low with occasional surges.The application has an Amazon Aurora MySQL provisioned database cluster on the backend.The VPC has an internet gateway and a NAT gateways attached.The web servers are in private subnets in an Auto Scaling group behind an Elastic Load Balancer.The web servers also upload data to an Amazon S3 bucket through the internet.A solutions architect needs to reduce operational costs and simplify the architecture.Which strategy should the solutions architect use?Read More →

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC.An AWS Site-to-Site VPN connects the VPC to the company’s on-premises network.The new service must communicate with existing on-premises services.The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone.This DNS zone is wholly hosted on premises and is available only on the company’s private network.A solutions architect must ensure that the new service can resolve hostnames on the company example domain to integrate with existing services.Which solution meets these requirements?Read More →

A startup company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI.The company’s engineers rely heavily on SSH access to the instances for troubleshooting.The company’s existing architecture includes the following:✑ A VPC with private and public subnets, and a NAT gateway✑ Site-to-Site VPN for connectivity with the on-premises environment✑ EC2 security groups with direct SSH access from the on-premises environmentThe company needs to increase security controls around SSH access and provide auditing of commands run by the engineers.Which strategy should a solutions architect use?Read More →

A company has a large number of AWS accounts in an organization in AWS Organizations.A different business group owns each account.All the AWS accounts are bound by legal compliance requirements that restrict all operations outside the eu-west-2 Region.The company’s security team has mandated the use of AWS Systems Manager Session Manager across all AWS accounts.Which solution should a solutions architect recommend to meet these requirements?Read More →

A company has an on-premises Microsoft SQL Server database that writes a nightly 200 GB export to a local drive.The company wants to move the backups to more robust cloud storage on Amazon S3.The company has set up a 10 Gbps AWS Direct Connect connection between the on-premises data center and AWS.Which solution meets these requirements MOST cost-effectively?Read More →

A development team has created a new flight tracker application that provides near-real-time data to users.The application has a front end that consists of anApplication Load Balancer (ALB) in front of two large Amazon EC2 instances in a single Availability Zone.Data is stored in a single Amazon RDS MySQL DB instance.An Amazon Route 53 DNS record points to the ALB.Management wants the development team to improve the solution to achieve maximum reliability with the least amount of operational overhead.Which set of actions should the team take?Read More →

A company has application services that have been containerized and deployed on multiple Amazon EC2 instances with public IPs.An Apache Kafka cluster has been deployed to the EC2 instances.A PostgreSQL database has been migrated to Amazon RDS for PostgreSQL.The company expects a significant increase of orders on its platform when a new version of its flagship product is released.What changes to the current architecture will reduce operational overhead and support the product release?Read More →