Solutions Architect Professional (Page 31)

A company is running a workload that consists of thousands of Amazon EC2 instances.The workload is running in a VPC that contains several public subnets and private subnets.The public subnets have a route for 0.0.0.0/0 to an existing internet gateway.The private subnets have a route for 0.0.0.0/0 to an existing NAT gateway.A solutions architect needs to migrate the entire fleet of EC2 instances to use IPv6.The EC2 instances that are in private subnets must not be accessible from the public internet.What should the solutions architect do to meet these requirements?Read More →

A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region.The company’s on-premises network uses the connection to communicate with the company’s resources in the AWS Cloud.The connection has a single private virtual interface that connects to a single VPC.A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region.The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.Which solution meets these requirements?Read More →

A company is creating a REST API to share information with six of its partners based in the United States.The company has created an Amazon API Gateway Regional endpoint.Each of the six partners will access the API once per day to post daily sales figures.After initial deployment, the company observes 1,000 requests per second originating from 500 different IP addresses around the world.The company believes this traffic is originating from a botnet and wants to secure its API while minimizing cost.Which approach should the company take to secure its API?Read More →

A company has released a new version of a website to target an audience in Asia and South America.The website’s media assets are hosted on Amazon S3 and have an Amazon CloudFront distribution to improve end-user performance.However, users are having a poor login experience, the authentication service is only available in the us-east-1 AWS Region.How can the Solutions Architect improve the login experience and maintain high security and performance with minimal management overhead?Read More →

A company runs an unauthenticated static website (www.example.com) that includes a registration form for users.The website uses Amazon S3 for hosting and uses Amazon CloudFront as the content delivery network with AWS WAF configured.When the registration form is submitted, the website calls an Amazon API Gateway API endpoint that invokes an AWS Lambda function to process the payload and forward the payload to an external API call.During testing, a solutions architect encounters a cross-origin resource sharing (CORS) error.The solutions architect confirms that the CloudFront distribution origin has the Access-Control-Allow-Origin header set to www.example.com.What should the solutions architect do to resolve the error?Read More →

A company is running a .NET three-tier web application on AWS.The team currently uses XL storage optimized instances to store and serve the website’s image and video files on local instance storage.The company has encountered issues with data loss from replication and instance failures.The Solutions Architect has been asked to redesign this application to improve its reliability while keeping costs low.Which solution will meet these requirements?Read More →

A media storage application uploads user photos to Amazon S3 for processing by AWS Lambda functions.Application state is stored in Amazon DynamoDB tables.Users are reporting that some uploaded photos are not being processed properly.The application developers trace the logs and find that Lambda is experiencing photo processing issues when thousands of users upload photos simultaneously.The issues are the result of Lambda concurrency limits and the performance of DynamoDB when data is saved.Which combination of actions should a solutions architect take to increase the performance and reliability of the application? (Choose two.)Read More →

A company with multiple accounts is currently using a configuration that does not meet the following security governance policies:✑ Prevent ingress from port 22 to any Amazon EC2 instance.✑ Require billing and application tags for resources.✑ Encrypt all Amazon EBS volumes.A solutions architect wants to provide preventive and detective controls, including notifications about a specific resource, if there are policy deviations.Which solution should the solutions architect implement?Read More →

A company uses AWS Organizations to manage its AWS accounts.The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage.The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?Read More →

A company is running a legacy application on Amazon EC2 instances in multiple Availability Zones behind a software load balancer that runs on an active/standby set of EC2 instances.For disaster recovery, the company has created a warm standby version of the application environment that is deployed in another AWSRegion.The domain for the application uses a hosted zone from Amazon Route 53.The company needs the application to use static IP addresses, even in the case of a failover event to the secondary Region.The company also requires the client’s source IP address to be available for auditing purposes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →