Solutions Architect Professional (Page 35)

A company is building a software-as-a-service (SaaS) solution on AWS.The company has deployed an Amazon API Gateway REST API with AWS Lambda integration in multiple AWS Regions and in the same production account.The company offers tiered pricing that gives customers the ability to pay for the capacity to make a certain number of API calls per second.The premium tier offers up to 3,000 calls per second, and customers are identified by a unique API key.Several premium tier customers in various Regions report that they receive error responses of 429 Too Many Requests from multiple API methods during peak usage hours.Logs indicate that the Lambda function is never invoked.What could be the cause of the error messages for these customers?Read More →

A company is running an application in the AWS Cloud.The application uses AWS Lambda functions and Amazon Elastic Container Service (Amazon ECS) containers that run with AWS Fargate technology as its primary compute.The load on the application is irregular.The application experiences long periods of no usage, followed by sudden and significant increases and decreases in traffic.The application is write-heavy and stores data in an Amazon Aurora MySQL database.The database runs on an Amazon RDS memory optimized DB instance that is not able to handle the load.What is the MOST cost-effective way for the company to handle the sudden and significant changes in traffic?Read More →

A company runs its application in the eu-west-1 Region and has one account for each of its environments: development, testing, and production.All the environments are running 24 hours a day, 7 days a week by using stateful Amazon EC2 instances and Amazon RDS for MySQL databases.The databases are between 500 GB and 800 GB in size.The development team and testing team work on business days during business hours, but the production environment operates 24 hours a day, 7 days a week.The company wants to reduce costs.All resources are tagged with an environment tag with either development, testing, or production as the key.What should a solutions architect do to reduce costs with the LEAST operational effort?Read More →

An online magazine will launch its latest edition this month.This edition will be the first to be distributed globally.The magazine’s dynamic website currently uses an Application Load Balancer in front of the web tier, a fleet of Amazon EC2 instances for web and application servers, and Amazon Aurora MySQL.Portions of the website include static content and almost all traffic is read-only.The magazine is expecting a significant spike in internet traffic when the new edition is launched.Optimal performance is a top priority for the week following the launch.Which combination of steps should a solutions architect take to reduce system response times for a global audience? (Choose two.)Read More →

A company wants to migrate to AWS.The company wants to use a multi-account structure with centrally managed access to all accounts and applications.The company also wants to keep the traffic on a private network.Multi-factor authentication (MFA) is required at login, and specific roles are assigned to user groups.The company must create separate accounts for development.staging, production, and shared network.The production account and the shared network account must have connectivity to all accounts.The development account and the staging account must have access only to each other.Which combination of steps should a solutions architect take 10 meet these requirements? (Choose three.)Read More →

A company is refactoring its on-premises order-processing platform in the AWS Cloud.The platform includes a web front end that is hosted on a fleet of VMs.RabbitMQ to connect the front end to the backend, and a Kubernetes cluster to run a containerized backend system to process the orders.The company does not want to make any major changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A retail company has an on-premises data center in Europe.The company also has a multi-Region AWS presence that includes the eu-west-1 and us-east-1 Regions.The company wants to be able to route network traffic from its on-premises infrastructure into VPCs in either of those Regions.The company also needs to support traffic that is routed directly between VPCs in those Regions.No single points of failure can exist on the network.The company already has created two 1 Gbps AWS Direct Connect connections from its on-premises data center.Each connection goes into a separate Direct Connect location in Europe for high availability.These two locations are named DX-A and DX-B, respectively.Each Region has a single AWS Transit Gateway that is configured to route all inter-VPC traffic within that Region.Which solution will meet these requirements?Read More →

A company has introduced a new policy that allows employees to work remotely from their homes if they connect by using a VPN.The company is hosting internal applications with VPCs in multiple AWS accounts.Currently, the applications are accessible from the company’s on-premises office network through an AWS Site- to-Site VPN connection.The VPC in the company’s main AWS account has peering connections established with VPCs in other AWS accounts.A solutions architect must design a scalable AWS Client VPN solution for employees to use while they work from home.What is the MOST cost-effective solution that meets these requirements?Read More →