Solutions Architect Professional (Page 120)

In regard to DynamoDB, for which one of the following parameters does Amazon not charge you?Read More →

A digital marketing company has multiple AWS accounts that belong to various teams.The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company’s marketing campaigns.The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects.A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account.The solutions architect also has set up a custom AWS KeyManagement Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket.However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Access Denied error.The solutions architect must ensure that users in the Strategy account can access the S3 bucket.The solution must provide these users with only the minimum permissions that they need.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A solutions architect is importing a VM from an on-premises environment by using the Amazon EC2 VM Import feature of AWS Import/Export.The solutions architect has created an AMI and has provisioned an Amazon EC2 instance that is based on that AMI.The EC2 instance runs inside a public subnet in a VPC and has a public IP address assigned.The EC2 instance does not appear as a managed instance in the AWS Systems Manager console.Which combination of steps should the solutions architect take to troubleshoot this issue? (Choose two.)Read More →

A company needs to establish a connection from its on-premises data center to AWS.The company needs to connect all of its VPCs that are located in differentAWS Regions with transitive routing capabilities between VPC networks.The company also must reduce network outbound traffic costs, increase bandwidth throughput, and provide a consistent network experience for end users.Which solution will meet these requirements?Read More →

A company has created an OU in AWS Organizations for each of its engineering teams.Each OU owns multiple AWS accounts.The organization has hundreds ofAWS accounts.A solutions architect must design a solution so that each OU can view a breakdown of usage costs across its AWS accounts.Which solution meets these requirements?Read More →

A company is building an application on AWS.The application sends logs to an Amazon Elasticsearch Service (Amazon ES) cluster for analysis.All data must be stored within a VPC.Some of the company’s developers work from home.Other developers work from three different company office locations.The developers need to accessAmazon ES to analyze and visualize logs directly from their local development machines.Which solution will meet these requirements?Read More →

A company has a new application that needs to run on five Amazon EC2 instances in a single AWS Region.The application requires high-throughput, low-latency network connections between all of the EC2 instances where the application will run.There is no requirement for the application to be fault tolerant.Which solution will meet these requirements?Read More →

A financial services company in North America plans to release a new online web application to its customers on AWS.The company will launch the application in the us-east-1 Region on Amazon EC2 instances.The application must be highly available and must dynamically scale to meet user traffic.The company also wants to implement a disaster recovery environment for the application in the us-west-1 Region by using active-passive failover.Which solution will meet these requirements?Read More →

A company uses AWS Organizations to manage multiple AWS accounts.The accounts share an Amazon Simple Queue Service (Amazon SQS) queue.The SQS queue is also shared with other AWS accounts outside the organization.All internal and external accounts have access to send and receive messages according to a permissions policy that is attached to the SQS queue.The company wants to identify any external principals that have access to the SQS queue.How should a solutions architect meet this requirement?Read More →

A company needs to deploy its document storage application across two AWS Regions.The company is storing PDF documents that have an average file size of 512 KiB and a minimum file size of 200 KiB.The company needs protection for accidental document overwrites in the primary Region.The secondary Region must have cost-optimized storage.The company needs a solution that provides an SLA of 99.99% that files will be replicated to the secondary Region within 15 minutes.Which solution will meet these requirements?Read More →