Solutions Architect Professional (Page 33)

A company in the United States (US) has acquired a company in Europe.Both companies use the AWS Cloud.The US company has built a new application with a microservices architecture.The US company is hosting the application across five VPCs in the us-east-2 Region.The application must be able to access resources in one VPC in the eu-west-1 Region.However, the application must not be able to access any other VPCs.The VPCs in both Regions have no overlapping CIDR ranges.All Accounts are already consolidated in one organization in AWS Organizations.Which solution will meet these requirements MOST cost-effectively?Read More →

A company’s compliance audit reveals that some Amazon Elastic Block Store (Amazon EBS) volumes that were created in an AWS account were not encrypted.A solutions architect must implement a solution to encrypt all new EBS volumes at rest.Which solution will meet this requirement with the LEAST effort?Read More →

A United Kingdom (UK) company recently completed a successful proof of concept in Amazon WorkSpaces.The company also has a large office in the UnitedStates (US).Staff members from each office regularly travel between the two locations and need access to a corporate WorkSpace without any reconfiguration of their WorkSpaces client.The company has purchased a domain by using Amazon Route 53 for the connection alias.The company will use a Windows profile and document management solution.A solutions architect needs to design the full solution.The solution must use a configuration of WorkSpaces in two AWS Regions and must provide Regional resiliency.Which solution will meet these requirements?Read More →

A company is building a hybrid environment that includes servers in an on-premises data center and in the AWS Cloud.The company has deployed Amazon EC2 instances in three VPCs.Each VPC is in a different AWS Region.The company has established an AWS Direct.Connect connection to the data center from the Region that is closest to the data center.The company needs the servers in the on-premises data center to have access to the EC2 instances in all three VPCs.The servers in the on-premises data center also must have access to AWS public services.Which combination of steps will meet these requirements with the LEAST cost? (Choose two.)Read More →

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company’s AWS environments.The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region.The company has set up routing from the shared services VPC to other VPCs.Which steps should the solutions architect recommend to meet these requirements? (Choose three.)Read More →

A company is planning to migrate an application from on premises to the AWS Cloud.The company will begin the migration by moving the application’s underlying data storage to AWS.The application data is stored on a shared file system on premises, and the application servers connect to the shared file system throughSMB.A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage.Until the application is fully migrated and code is rewritten to use native Amazon S3 APIs, the application must continue to have access to the data through SMB.The solutions architect must migrate the application data toAWS to its new location while still allowing the on-premises application to access the data.Which solution will meet these requirements?Read More →

A company needs to use an AWS Transfer Family SFTP-enabled server with an Amazon S3 bucket to receive updates from a third-party data supplier.The data is encrypted with Pretty Good Privacy (PGP) encryption.The company needs a solution that will automatically decrypt the data after the company receives the data.A solutions architect will use a Transfer Family managed workflow.The company has created an IAM service role by using an IAM policy that allows access to AWS Secrets Manager and the S3 bucket.The role’s trust relationship allows the transfer amazonaws.com service to assume the role.What should the solutions architect do next to complete the solution for automatic decryption?Read More →

A company has more than 10,000 sensors that send data to an on-premises Apache Kafka server by using the Message Queuing Telemetry Transport (MQTT) protocol.The on-premises Kafka server transforms the data and then stores the results as objects in an Amazon S3 bucket.Recently, the Kafka server crashed.The company lost sensor data while the server was being restored.A solutions architect must create a new design on AWS that is highly available and scalable to prevent a similar occurrence.Which solution will meet these requirements?Read More →

An environmental company is deploying sensors in major cities throughout a country to measure air quality.The sensors connect to AWS IoT Core to ingest timeseries data readings.The company stores the data in Amazon DynamoDB.For business continuity, the company must have the ability to ingest and store data in two AWS Regions.Which solution will meet these requirements?Read More →

A company is running a custom database in the AWS Cloud.The database uses Amazon EC2 for compute and uses Amazon Elastic Block Store (Amazon EBS) for storage.The database runs on the latest generation of EC2 instances and uses a General Purpose SSD (gp2) EBS volume for data.The current data volume has the following characteristics:✑ The volume is 512 GB in size.✑ The volume never goes above 256 GB utilization.✑ The volume consistently uses around 1,500 IOPS.A solutions architect needs to conduct an analysis of the current database storage layer and make a recommendation about ways to reduce cost.Which solution will provide the MOST cost savings without impacting the performance of the database?Read More →