Solutions Architect Professional (Page 41)

A company runs an application in the cloud that consists of a database and a website.Users can post data to the website, have the data processed, and have the data sent back to them in an email.Data is stored in a MySQL database running on an Amazon EC2 instance.The database is running in a VPC with two private subnets.The website is running on Apache Tomcat in a single EC2 instance in a different VPC with one public subnet.There is a single VPC peering connection between the database and website VPC.The website has suffered several outages during the last month due to high traffic.Which actions should a solutions architect take to increase the reliability of the application? (Choose three.)Read More →

A company is running a containerized application in the AWS Cloud.The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group.The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images.When a new image version is uploaded, the new image version receives a unique tag.The company needs a solution that inspects new image versions for common vulnerabilities and exposures.The solution must automatically delete new image tags that have Critical or High severity findings.The solution also must notify the development team when such a deletion occurs.Which solution meets these requirements?Read More →

A company wants to use Amazon S3 to back up its on-premises file storage solution.The company’s on-premises file storage solution supports NFS, and the company wants its new solution to support NFS.The company wants to archive the backup files after 5 days.If the company needs archived files for disaster recovery, the company is willing to wait a few days for the retrieval of those files.Which solution meets these requirements MOST cost-effectively?Read More →

A company has multiple AWS accounts as part of an organization created with AWS Organizations.Each account has a VPC in the us-east-2 Region and is used for either production or development workloads.Amazon EC2 instances across production accounts need to communicate with each other, and EC2 instances across development accounts need to communicate with each other, but production and development instances should not be able to communicate with each other.To facilitate connectivity, the company created a common network account.The company used AWS Transit Gateway to create a transit gateway in the us-east-2Region in the network account and shared the transit gateway with the entire organization by using AWS Resource Access Manager.Network administrators then attached VPCs in each account to the transit gateway, after which the EC2 instances were able to communicate across accounts.However, production and development accounts were also able to communicate with one another.Which set of steps should a solutions architect take to ensure production traffic and development traffic are completely isolated?Read More →

A solutions architect must implement a multi-Region architecture for an Amazon RDS for PostgreSQL database that supports a web application.The database launches from an AWS CloudFormation template that includes AWS services and features that are present in both the primary and secondary Regions.The database is configured for automated backups, and it has an RTO of 15 minutes and an RPO of 2 hours.The web application is configured to use an AmazonRoute 53 record to route traffic to the database.Which combination of steps will result in a highly available architecture that meets all the requirements? (Choose two.)Read More →

A Solutions Architect is building a containerized .NET Core application that will run in AWS Fargate.The backend of the application requires Microsoft SQL Server with high availability.All tiers of the application must be highly available.The credentials used for the connection string to SQL Server should not be stored on disk within the .NET Core front-end containers.Which strategies should the Solutions Architect use to meet these requirements?Read More →

In regard to DynamoDB, for which one of the following parameters does Amazon not charge you?Read More →

A digital marketing company has multiple AWS accounts that belong to various teams.The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company’s marketing campaigns.The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects.A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account.The solutions architect also has set up a custom AWS KeyManagement Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket.However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Access Denied error.The solutions architect must ensure that users in the Strategy account can access the S3 bucket.The solution must provide these users with only the minimum permissions that they need.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A solutions architect is importing a VM from an on-premises environment by using the Amazon EC2 VM Import feature of AWS Import/Export.The solutions architect has created an AMI and has provisioned an Amazon EC2 instance that is based on that AMI.The EC2 instance runs inside a public subnet in a VPC and has a public IP address assigned.The EC2 instance does not appear as a managed instance in the AWS Systems Manager console.Which combination of steps should the solutions architect take to troubleshoot this issue? (Choose two.)Read More →

A company needs to establish a connection from its on-premises data center to AWS.The company needs to connect all of its VPCs that are located in differentAWS Regions with transitive routing capabilities between VPC networks.The company also must reduce network outbound traffic costs, increase bandwidth throughput, and provide a consistent network experience for end users.Which solution will meet these requirements?Read More →