Solutions Architect Professional (Page 46)

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.The company has the following DNS resolution requirements:On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company wants to migrate its corporate data center from on premises to the AWS Cloud.The data center includes physical servers and VMs that use VMware and Hyper-V.An administrator needs to select the correct services to collect data for the initial migration discovery process.The data format should be supported by AWS Migration Hub.The company also needs the ability to generate reports from the data.Which solution meets these requirements?Read More →

A company has an IoT platform that runs in an on-premises environment.The platform consists of a server that connects to IoT devices by using the MQTT protocol.The platform collects telemetry data from the devices at least once every 5 minutes.The platform also stores device metadata in a MongoDB cluster.An application that is installed on an on-premises machine runs periodic jobs to aggregate and transform the telemetry and device metadata.The application creates reports that users view by using another web application that runs on the same on-premises machine.The periodic jobs take 120-600 seconds to run.However, the web application is always running.The company is moving the platform to AWS and must reduce the operational overhead of the stack.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A company is using multiple AWS accounts.The company has a shared service account and several other accounts for different projects.A team has a VPC in a project account.The team wants to connect this VPC to a corporate network through an AWS Direct Connect gateway that exists in the shared services account.The team wants to automatically perform a virtual private gateway association with the Direct Connect gateway by using an already- tested AWS Lambda function while deploying its VPC networking stack.The Lambda function code can assume a role by using AWS Security Token Service(AWS STS).The team is using AWS CloudFormation to deploy its infrastructure.Which combination of steps will meet these requirements? (Choose three.)Read More →

A global manufacturing company plans to migrate the majority of its applications to AWS.However, the company is concerned about applications that need to remain within a specific country or in the company’s central on-premises data center because of data regulatory requirements or requirements for latency of single-digit milliseconds.The company also is concerned about the applications that it hosts in some of its factory sites, where limited network infrastructure exists.The company wants a consistent developer experience so that its developers can build applications once and deploy on premises, in the cloud, or in a hybrid architecture.The developers must be able to use the same tools, APIs, and services that are familiar to them.Which solution will provide a consistent hybrid experience to meet these requirements?Read More →

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is running an application in the AWS Cloud.The core business logic is running on a set of Amazon EC2 instances in an Auto Scaling group.An Application Load Balancer (ALB) distributes traffic to the EC2 instances.Amazon Route 53 record api.example.com is pointing to the ALB.The company’s development team makes major updates to the business logic.The company has a rule that when changes are deployed, only 10% of customers can receive the new logic during a testing window.A customer must use the same version of the business logic during the testing window.How should the company deploy the updates to meet these requirements?Read More →

A company has IoT sensors that monitor traffic patterns throughout a large city.The company wants to read and collect data from the sensors and perform aggregations on the data.A solutions architect designs a solution in which the IoT devices are streaming to Amazon Kinesis Data Streams.Several applications are reading from the stream.However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.Which actions should the solutions architect take to resolve this issue? (Choose three.)Read More →

A company deploys a new web application.As part of the setup, the company configures AWS WAF to log to Amazon S3 through Amazon Kinesis Data Firehose.The company develops an Amazon Athena query that runs once daily to return AWS WAF log data from the previous 24 hours.The volume of daily logs is constant.However, over time, the same query is taking more time to run.A solutions architect needs to design a solution to prevent the query time from continuing to increase.The solution must minimize operational overhead.Which solution will meet these requirements?Read More →

A company is using a single AWS Region for its ecommerce website.The website includes a web application that runs on several Amazon EC2 instances behind an Application Load Balancer (ALB).The website also includes an Amazon DynamoDB table.A custom domain name in Amazon Route 53 is linked to the ALB.The company created an SSL/TLS certificate in AWS Certificate Manager (ACM) and attached the certificate to the ALB.The company is not using a content delivery network as part of its design.The company wants to replicate its entire application stack in a second Region to provide disaster recovery, plan for future growth, and provide improved access time to users.A solutions architect needs to implement a solution that achieves these goals and minimizes administrative overhead.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →