Solutions Architect Professional (Page 15)

A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts.The company’s information security policy states that the S3 bucket must not be accessed over the public internet and that each application should have the minimum permissions necessary to function.To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application.Which combination of steps should the solutions architect take to implement this solution? (Choose two.)Read More →

A company is developing a new on-demand video application that is based on microservices.The application will have 5 million users at launch and will have 30 million users after 6 months.The company has deployed the application on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.The company developed the application by using ECS services that use the HTTPS protocol.A solutions architect needs to implement updates to the application by using blue/green deployments.The solution must distribute traffic to each ECS service through a load balancer.The application must automatically adjust the number of tasks in response to an Amazon CloudWatch alarm.Which solution will meet these requirements?Read More →

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWSCodeCommit repository.The security team wants to automatically find and remediate instances of this security vulnerability.Which solution will ensure that the credentials are appropriately secured automatically?Read More →

A company’s public API runs as tasks on Amazon Elastic Container Service (Amazon ECS).The tasks run on AWS Fargate behind an Application Load Balancer (ALB) and are configured with Service Auto Scaling for the tasks based on CPU utilization.This service has been running well for several months.Recently, API performance slowed down and made the application unusable.The company discovered that a significant number of SQL injection attacks had occurred against the API and that the API service had scaled to its maximum amount.A solutions architect needs to implement a solution that prevents SQL injection attacks from reaching the ECS API service.The solution must allow legitimate traffic through and must maximize operational efficiency.Which solution meets these requirements?Read More →

A company is migrating an application to the AWS Cloud.The application runs in an on-premises data center and writes thousands of images into a mounted NFS file system each night.After the company migrates the application, the company will host the application on an Amazon EC2 instance with a mounted AmazonElastic File System (Amazon EFS) file system.The company has established an AWS Direct Connect connection to AWS.Before the migration cutover, a solutions architect must build a process that will replicate the newly created on-premises images to the EFS file system.What is the MOST operationally efficient way to replicate the images?Read More →

A solutions architect is creating an application that stores objects in an Amazon S3 bucket.The solutions architect must deploy the application in two AWS Regions that will be used simultaneously.The objects in the two S3 buckets must remain synchronized with each other.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A new startup is running a serverless application using AWS Lambda as the primary source of compute.New versions of the application must be made available to a subset of users before deploying changes to all users.Developers should also have the ability to abort the deployment and have access to an easy rollbackmechanism.A solutions architect decides to use AWS CodeDeploy to deploy changes when a new version is available.Which CodeDeploy configuration should the solutions architect use?Read More →

A company is running an application in the AWS Cloud.The application collects and stores a large amount of unstructured data in an Amazon S3 bucket.The S3 bucket contains several terabytes of data and uses the S3 Standard storage class.The data increases in size by several gigabytes every day.The company needs to query and analyze the data.The company does not access data that is more than 1 year old.However, the company must retain all the data indefinitely for compliance reasons.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is planning to migrate an existing high performance computing (HPC) solution to the AWS Cloud.The existing solution consists of a 12-node cluster running Linux with high speed interconnectivity developed on a single rack.A solutions architect needs to optimize the performance of the HPC cluster.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company consists or two separate business units.Each business unit has its own AWS account within a single organization in AWS Organizations.The business units regularly share sensitive documents with each other.To facilitate sharing, the company created an Amazon S3 bucket in each account and configured low-way replication between the S3 buckets.The S3 buckets have millions of objects.Recently, a security audit identified that neither S3 bucket has encryption at rest enabled.Company policy requires that all documents must be stored with encryption at rest.The company wants to implement server-side encryption with Amazon S3 managed encryption keys (SSE-S3).What is the MOST operationally efficient solution that meets these requirements?Read More →