Solutions Architect Professional (Page 122)

A medical company is building a data lake on Amazon S3.The data must be encrypted in transit and at rest.The data must remain protected even if S3 bucket is inadvertently made public.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company operates an on-premises software-as-a-service (SaaS) solution that ingests several files daily.The company provides multiple public SFTP endpoints to its customers to facilitate the file transfers.The customers add the SFTP endpoint IP addresses to their firewall allow list for outbound traffic.Changes to theSFTP endpoint IP addresses are not permitted.The company wants to migrate the SaaS solution to AWS and decrease the operational overhead of the file transfer service.Which solution meets these requirements?Read More →

A company’s solutions architect is managing a learning platform that supports more than 1 million students.The company’s business reporting team is experiencing slow performance while extracting large datasets from the database.The learning application is based on PHP and runs on Amazon EC2 instances that are in an Amazon EC2 Auto Scaling group behind an Application Load Balancer (ALB).Application data is stored in an Amazon S3 bucket and in an Amazon RDS for MySOL database.The ALB is the origin of an Amazon CloudFront distribution.The solutions architect observes that slow read operations for SELECT queries are affecting the RDS for MySOL DB instance’s CPU utilization.The solutions architect must find a scalable solution to improve the slow website performance with near-zero downtime.The solution also must provide automatic failover with no data loss.Which solution will meet these requirements?Read More →

A company deploys workloads in multiple AWS accounts.Each account has a VPC with VPC flow logs published in text log format to a centralized Amazon S3 bucket.Each log file is compressed with gzip compression.The company must retain the log files indefinitely.A security engineer occasionally analyzes the logs by using Amazon Athena to query the VPC flow logs.The query performance is degrading over time as the number of ingested logs is growing.A solutions architect must improve the performance of the log analysis and reduce the storage space that the VPC flow logs use.Which solution will meet these requirements with the LARGEST performance improvement?Read More →

How does in-memory caching improve the performance of applications in ElastiCache?Read More →

An organization is making software for the CIA in USA.CIA agreed to host the application on AWS but in a secure environment.The organization is thinking of hosting the application on the AWS GovCloud region.Which of the below mentioned difference is not correct when the organization is hosting on the AWSGovCloud in comparison with the AWS standard region?Read More →

An organization has created multiple components of a single application for compartmentalization.Currently all the components are hosted on a single EC2 instance.Due to security reasons the organization wants to implement two separate SSLs for the separate modules although it is already using VPC.How can the organization achieve this with a single instance?Read More →

An organization is setting up a highly scalable application using Elastic Beanstalk.They are using Elastic Load Balancing (ELB) as well as a Virtual Private Cloud (VPC) with public and private subnets.They have the following requirements:- All the EC2 instances should have a private IP- All the EC2 instances should receive data via the ELB’s.Which of these will not be needed in this setup?Read More →

True or False: “In the context of Amazon ElastiCache, from the application’s point of view, connecting to the cluster configuration endpoint is no different than connecting directly to an individual cache node.”Read More →

By default, temporary security credentials for an IAM user are valid for a maximum of 12 hours, but you can request a duration as long as _________ hours.Read More →