Solutions Architect Professional (Page 38)

A company wants to create a single Amazon S3 bucket for its data scientists to store work-related documents.The company uses AWS IAM Identity Center to authenticate all users.A group for the data scientists was created.The company wants to give the data scientists access to only their own work.The company also wants to create monthly reports that show which documents each user accessed.Which combination of steps will meet these requirements? (Choose two.)Read More →

An education company is running a web application used by college students around the world.The application runs in an Amazon Elastic Container Service(Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB).A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application’s authentication service.All the failed login attempts originate from about 500 different IP addresses that change each week.A solutions architect must prevent the failed login attempts from overwhelming the authentication service.Which solution meets these requirements with the MOST operational efficiency?Read More →

A company has an application that uses Amazon EC2 instances in an Auto Scaling group.The quality assurance (QA) department needs to launch a large number of short-lived environments to test the application.The application environments are currently launched by the manager of the department using an AWS CloudFormation template.To launch the stack, the manager uses a role with permission to use CloudFormation, EC2, and Auto Scaling APIs.The manager wants to allow testers to launch their own environments, but does not want to grant broad permissions to each user.Which set up would achieve these goals?Read More →

A company is planning a large event where a promotional offer will be introduced.The company’s website is hosted on AWS and backed by an Amazon RDS forPostgreSQL DB instance.The website explains the promotion and includes a sign-up page that collects user information and preferences.Management expects large and unpredictable volumes of traffic periodically, which will create many database writes.A solutions architect needs to build a solution that does not change the underlying data model and ensures that submissions are not dropped before they are committed to the database.Which solution meets these requirements?Read More →

A company has developed APIs that use Amazon API Gateway with Regional endpoints.The APIs call AWS Lambda functions that use API Gateway authentication mechanisms.After a design review, a solutions architect identifies a set of APIs that do not require public access.The solutions architect must design a solution to make the set of APIs accessible only from a VPC.All APIs need to be called with an authenticated userWhich solution will meet these requirements with the LEAST amount of effort?Read More →

A solutions architect works for a government agency that has strict disaster recovery requirements.All Amazon Elastic Block Store (Amazon EBS) snapshots are required to be saved in at least two additional AWS Regions.The agency also is required to maintain the lowest possible operational overhead.Which solution meets these requirements?Read More →

A research company is running daily simulations in the AWS Cloud to meet high demand.The simulations run on several hundred Amazon EC2 instances that are based on Amazon Linux 2.Occasionally, a simulation gets stuck and requires a cloud operations engineer to solve the problem by connecting to an EC2 instance through SSH.Company policy states that no EC2 instance can use the same SSH key and that all connections must be logged in AWS CloudTrail.How can a solutions architect meet these requirements?Read More →

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two AvailabilityZones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →

A company needs to gather data from an experiment in a remote location that does not have internet connectivity.During the experiment, sensors that are connected to a local network will generate 6 TB of data in a proprietary format over the course of 1 week.The sensors can be configured to upload their data files to an FTP server periodically, but the sensors do not have their own FTP server.The sensors also do not support other protocols.The company needs to collect the data centrally and move the data to object storage in the AWS Cloud as soon as possible after the experiment.Which solution will meet these requirements?Read More →

A company decided to purchase Amazon EC2 Reserved Instances.A solutions architect is tasked with implementing a solution where only the master account inAWS Organizations is able to purchase the Reserved Instances.Current and future member accounts should be blocked from purchasing Reserved Instances.Which solution will meet these requirements?Read More →