Solutions Architect Professional (Page 45)

A company has a multi-tier web application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are in an Auto Scaling group.The ALB and the Auto Scaling group are replicated in a backup AWS Region.The minimum value and the maximum value for the Auto Scaling group are set to zero.An Amazon RDS Multi-AZ DB instance stores the application’s data.The DB instance has a read replica in the backup Region.The application presents an endpoint to end users by using an Amazon Route 53 record.The company needs to reduce its RTO to less than 15 minutes by giving the application the ability to automatically fail over to the backup Region.The company does not have a large enough budget for an active-active strategy.What should a solutions architect recommend to meet these requirements?Read More →

What types of identities do Amazon Cognito identity pools support?Read More →

A company is running a traditional web application on Amazon EC2 instances.The company needs to refactor the application as microservices that run on containers.Separate versions of the application exist in two distinct environments: production and testing.Load for the application is variable, but the minimum load and the maximum load are known.A solutions architect needs to design the updated application with a serverless architecture that minimizes operational complexity.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is developing and hosting several projects in the AWS Cloud.The projects are developed across multiple AWS accounts under the same organization in AWS Organizations.The company requires the cost for cloud infrastructure to be allocated to the owning project.The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.Which actions should a solutions architect take to resolve the problem and prevent it from happening in the future? (Choose three.)Read More →

A company is running a two-tier web-based application in an on-premises data center.The application layer consists of a single server running a stateful application.The application connects to a PostgreSQL database running on a separate server.The application’s user base is expected to grow significantly, so the company is migrating the application and database to AWS.The solution will use Amazon Aurora PostgreSQL, Amazon EC2 Auto Scaling, and Elastic Load Balancing.Which solution will provide a consistent user experience that will allow the application and database tiers to scale?Read More →

A solutions architect is designing a network for a new cloud deployment.Each account will need autonomy to modify route tables and make changes.Centralized and controlled egress internet connectivity is also needed.The cloud footprint is expected to grow to thousands of AWS accounts.Which architecture will meet these requirements?Read More →

A company uses AWS Organizations with a single OU named Production to manage multiple accounts.All accounts are members of the Production OU.Administrators use deny list SCPs in the root of the organization to manage access to restricted services.The company recently acquired a new business unit and invited the new unit’s existing AWS account to the organization.Once onboarded, the administrators of the new business unit discovered that they are not able to update existing AWS Config rules to meet the company’s policies.Which option will allow administrators to make changes and continue to enforce the current policies without introducing additional long-term maintenance?Read More →

A company hosts a web application on AWS in the us-east-1 Region.The application servers are distributed across three Availability Zones behind an ApplicationLoad Balancer.The database is hosted in MySQL database on an Amazon EC2 instance.A solutions architect needs to design a cross-Region data recovery solution using AWS services with an RTO of less than 5 minutes and an RPO of less than 1 minute.The solutions architect is deploying application servers in us- west-2, and has configured Amazon Route 53 health checks and DNS failover to us-west-2.Which additional step should the solutions architect take?Read More →

A company is providing weather data over a REST-based API to several customers.The API is hosted by Amazon API Gateway and is integrated with different AWS Lambda functions for each API operation.The company uses Amazon Route 53 for DNS and has created a resource record of weather.example.com.The company stores data for the API in Amazon DynamoDB tables.The company needs a solution that will give the API the ability to fail over to a different AWS Region.Which solution will meet these requirements?Read More →

A company is using an on-premises Active Directory service for user authentication.The company wants to use the same authentication service to sign in to the company’s AWS accounts, which are using AWS Organizations.AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company’s AWS accounts.The company’s security policy requires conditional access to the accounts based on user groups and roles.User identities must be managed in a single location.Which solution will meet these requirements?Read More →