Solutions Architect Professional (Page 27)

A company is configuring connectivity to a multi-account AWS environment to support application workloads that serve users in a single geographic region.The workloads depend on a highly available, on-premises legacy system deployed across two locations.It is critical for the AWS workloads to maintain connectivity to the legacy system, and a minimum of 5 Gbps of bandwidth is required.All application workloads within AWS must have connectivity with one another.Which solution will meet these requirements?Read More →

A company has an on-premises data center and is using Kubernetes to develop a new solution on AWS.The company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters for its development and test environments.The EKS control plane and data plane for production workloads must reside on premises.The company needs an AWS managed solution for Kubernetes management.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company wants to provide desktop as a service (DaaS) to a number of employees using Amazon WorkSpaces.WorkSpaces will need to access files and services hosted on premises with authorization based on the company’s Active Directory.Network connectivity will be provided through an existing AWS DirectConnect connection.The solution has the following requirements:✑ Credentials from Active Directory should be used to access on-premises files and services.✑ Credentials from Active Directory should not be stored outside the company.✑ End users should have single sign-on (SSO) to on-premises files and services once connected to WorkSpaces.Which strategy should the solutions architect use for end user authentication?Read More →

A company used AWS CloudFormation to create all new infrastructure in its AWS member accounts.The resources rarely change and are properly sized for the expected load.The monthly AWS bill is consistent.Occasionally, a developer creates a new resource for testing and forgets to remove the resource when the test is complete.Most of these tests last a few days before the resources are no longer needed.The company wants to automate the process of finding unused resources.A solutions architect needs to design a solution that determines whether the cost in the AWS bill is increasing.The solution must help identify resources that cause an increase in cost and must automatically notify the company’s operations team.Which solution will meet these requirements?Read More →

A company is currently in the design phase of an application that will need an RPO of less than 5 minutes and an RTO of less than 10 minutes.The solutions architecture team is forecasting that the database will store approximately 10 TB of data.As part of the design, they are looking for a database solution that will provide the company with the ability to fail over to a secondary Region.Which solution will meet these business requirements at the LOWEST cost?Read More →

A company that has multiple business units is using AWS Organizations with all features enabled.The company has implemented an account structure in which each business unit has its own AWS account.Administrators in each AWS account need to view detailed cost and utilization data for their account by using Amazon Athena.Each business unit can have access to only its own cost and utilization data.The IAM policies that govern the ability to set up AWS Cost and Usage Reports are in place.A central Cost and Usage Report that contains all data for the organization is already available in an Amazon S3 bucket.Which solution will meet these requirements with the LEAST operational complexity?Read More →

An ecommerce website running on AWS uses an Amazon RDS for MySQL DB instance with General Purpose SSD storage.The developers chose an appropriate instance type based on demand, and configured 100 GB of storage with a sufficient amount of free space.The website was running smoothly for a few weeks until a marketing campaign launched.On the second day of the campaign, users reported long wait times and time outs.Amazon CloudWatch metrics indicated that both reads and writes to the DB instance were experiencing long response times.The CloudWatch metrics show 40% to 50% CPU and memory utilization, and sufficient free storage space is still available.The application server logs show no evidence of database connectivity issues.What could be the root cause of the issue with the marketing campaign?Read More →

A company hosts an intranet web application on Amazon EC2 instances behind an Application Load Balancer (ALB).Currently, users authenticate to the application against an internal user database.The company needs to authenticate users to the application by using an existing AWS Directory Service for Microsoft Active Directory directory.All users with accounts in the directory must have access to the application.Which solution will meet these requirements?Read More →

A company asks a solution architect to optimize the cost of a solution.The solution handles requests from multiple customers.The solution includes a multi-tier architecture that uses Amazon API Gateway, AWS Lambda, AWS Fargate, Amazon Simple Queue Service (Amazon SQS), and Amazon EC2.In the current setup, requests go through API Gateway to Lambda and either start a container in Fargate or push a message to an SQS queue.An EC2 Fleet provides EC2 instances that serve as workers for the SQS queue.The EC2 Fleet scales based on the number of items in the SQS queue.Which combination of steps should the solutions architect recommend to reduce cost the MOST? (Choose three.)Read More →

A company has many services running in its on-premises data center.The data center is connected to AWS using AWS Direct Connect (DX) and an IPSec VPN.The service data is sensitive and connectivity cannot traverse the internet.The company wants to expand into a new market segment and begin offering its services to other companies that are using AWS.Which solution will meet these requirements?Read More →