Solutions Architect Professional (Page 25)

A company stores and manages documents in an Amazon Elastic File System (Amazon EFS) file system.The file system is encrypted with an AWS Key Management Service (AWS KMS) key.The file system is mounted to an Amazon EC2 instance that runs proprietary software.The company has enabled automatic backups for the file system.The automatic backups use the AWS Backup default backup plan.A solutions architect must ensure that deleted documents can be recovered within an RPO of 100 minutes.Which solution will meet these requirements?Read More →

A company has an organization in AWS Organizations.The company has enabled trusted access between Organizations and AWS Resource Access Manager(AWS RAM).The organization includes three AWS accounts, one each for shared services, development, and production.The shared services account has aVPC.A solutions architect needs to meet the following requirements:* Configure access between the shared services VPC and the development and production accounts.* Ensure that workloads in each account are deployed to at least three Availability Zones.* Ensure that there is no direct communication between the development and production workloads.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has implemented a new security requirement.According to the new requirement, the company must scan all traffic from corporate AWS instances in the company’s VPC for violations of the company’s security policies.As a result of these scans, the company can block access to and from specific IP addresses.To meet the new requirement, the company deploys a set of Amazon EC2 instances in private subnets to serve as transparent proxies.The company installs approved proxy server software on these EC2 instances.The company modifies the route tables on all subnets to use the corresponding EC2 instances with proxy software as the default route.The company also creates security groups that are compliant with the security policies and assigns these security groups to the EC2 instances.Despite these configurations, the traffic of the EC2 instances in their private subnets is not being properly forwarded to the internet.What should a solutions architect do to resolve this issue?Read More →

What happens when Dedicated instances are launched into a VPC?Read More →

A company is designing an AWS environment for a manufacturing application.The application has been successful with customers, and the application’s user base has increased.The company has connected the AWS environment to the company’s on-premises data center through a 1 Gbps AWS Direct Connect connection.The company has configured BGP for the connection.The company must update the existing network connectivity solution to ensure that the solution is highly available, fault tolerant, and secure.Which solution will meet these requirements MOST cost-effectively?Read More →

You create a VPN connection, and your VPN device supports Border Gateway Protocol (BGP).Which of the following should be specified to configure the VPN connection?Read More →

A weather service provides high-resolution weather maps from a web application hosted on AWS in the eu-west-1 Region.The weather maps are updated frequently and stored in Amazon S3 along with static HTML content.The web application is fronted by Amazon CloudFront.The company recently expanded to serve users in the us-east-1 Region, and these new users report that viewing their respective weather maps is slow from time to time.Which combination of steps will resolve the us-east-1 performance issues? (Choose two.)Read More →

An organization is having a VPC for the HR department, and another VPC for the Admin department.The HR department requires access to all the instances running in the Admin VPC while the Admin department requires access to all the resources in the HR department.How can the organization setup this scenario?Read More →

A company has an on-premises website application that provides real estate information for potential renters and buyers.The website uses a Java backend and a NoSQL MongoDB database to store subscriber data.The company needs to migrate the entire application to AWS with a similar structure.The application must be deployed for high availability, and the company cannot make changes to the application.Which solution will meet these requirements?Read More →

ABC has created a multi-tenant Learning Management System (LMS).The application is hosted for five different tenants (clients) in the VPCs of the respectiveAWS accounts of the tenant.ABC wants to setup a centralized server which can connect with the LMS of each tenant upgrade if required.ABC also wants to ensure that one tenant VPC should not be able to connect to the other tenant VPC for security reasons.How can ABC setup this scenario?Read More →