Solutions Architect Professional (Page 14)

A company is planning to migrate an Amazon RDS for Oracle database to an RDS for PostgreSQL DB instance in another AWS account.A solutions architect needs to design a migration strategy that will require no downtime and that will minimize the amount of time necessary to complete the migration.The migration strategy must replicate all existing data and any new data that is created during the migration.The target database must be identical to the source database at completion of the migration process.All applications currently use an Amazon Route 53 CNAME record as their endpoint for communication with the RDS for Oracle DB instance.The RDS for Oracle DB instance is in a private subnet.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company needs to audit the security posture of a newly acquired AWS account.The company’s data security team requires a notification only when an Amazon S3 bucket becomes publicly exposed.The company has already established an Amazon Simple Notification Service (Amazon SNS) topic that has the data security team’s email address subscribed.Which solution will meet these requirements?Read More →

A large mobile gaming company has successfully migrated all of its on-premises infrastructure to the AWS Cloud.A solutions architect is reviewing the environment to ensure that it was built according to the design and that it is running in alignment with the Well-Architected Framework.While reviewing previous monthly costs in Cost Explorer, the solutions architect notices that the creation and subsequent termination of several large instance types account for a high proportion of the costs.The solutions architect finds out that the company’s developers are launching new Amazon EC2 instances as part of their testing and that the developers are not using the appropriate instance types.The solutions architect must implement a control mechanism to limit the instance types that only the developers can launch.Which solution will meet these requirements?Read More →

An education company is running a web application used by college students around the world.The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB).A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application’s authentication service.All the failed login attempts originate from about 500 different IP addresses that change each week.A solutions architect must prevent the failed login attempts from overwhelming the authentication service.Which solution meets these requirements with the MOST operational efficiency?Read More →

A company deployed a three-tier web application in two regions: us-east-1 and eu-west-1.The application must be active in both regions at the same time.The database tier of the application uses a single Amazon RDS Aurora database globally, with a master in us-east-1 and a read replica in eu-west-1.Both regions are connected by a VPN.The company wants to ensure that the application remains available even in the event of a region-level failure of all of the application’s components.It is acceptable for the application to be in read-only mode for up to 1 hour.The company plans to configure two Amazon Route 53 record sets, one for each of the regions.How should the company complete the configuration to meet its requirements while providing the lowest latency for the application end-users? (Choose two.)Read More →

A company operates an on-premises software-as-a-service (SaaS) solution that ingests several files daily.The company provides multiple public SFTP endpoints to its customers to facilitate the file transfers.The customers add the SFTP endpoint IP addresses to their firewall allow list for outbound traffic.Changes to the SFTP endpoint IP addresses are not permitted.The company wants to migrate the SaaS solution to AWS and decrease the operational overhead of the file transfer service.Which solution meets these requirements?Read More →

A company is using AWS Organizations to manage 15 AWS accounts.A solutions architect wants to run advanced analytics on the company’s cloud expenditures.The cost data must be gathered and made available from an analytics account.The analytics application runs in a VPC and must receive the raw cost data each night to run the analytics.The solutions architect has decided to use the Cost Explorer API to fetch the raw data and store the data in Amazon S3 in JSON format.Access to the raw cost data must be restricted to the analytics application.The solutions architect has already created an AWS Lambda function to collect data by using the Cost ExplorerAPI.Which additional actions should the solutions architect take to meet these requirements?Read More →

A company runs an application in an on-premises data center.The application gives users the ability to upload media files.The files persist in a file server.The web application has many users.The application server is overutilized, which causes data uploads to fail occasionally.The company frequently adds new storage to the file server.The company wants to resolve these challenges by migrating the application to AWS.Users from across the United States and Canada access the application.Only authenticated users should have the ability to access the application to upload files.The company will consider a solution that refactors the application, and the company needs to accelerate application development.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using AWS Organizations to manage multiple AWS accounts.For security purposes, the company requires the creation of an Amazon SimpleNotification Service (Amazon SNS) topic that enables integration with a third-party alerting system in all the Organizations member accounts.A solutions architect used an AWS CloudFormation template to create the SNS topic and stack sets to automate the deployment of CloudFormation stacks.Trusted access has been enabled in Organizations.What should the solutions architect do to deploy the CloudFormation StackSets in all AWS accounts?Read More →

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are part of an Auto Scaling group.The application has unpredictable workloads and frequently scales out and in.The company’s development team wants to analyze application logs to find ways to improve the application’s performance.However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?Read More →