Solutions Architect Professional (Page 51)

A company that uses AWS Organizations allows developers to experiment on AWS.As part of the landing zone that the company has deployed, developers use their company email address to request an account.The company wants to ensure that developers are not launching costly services or running services unnecessarily.The company must give developers a fixed monthly budget to limit their AWS costs.Which combination of steps will meet these requirements? (Choose three.)Read More →

Your team has a tomcat-based Java application you need to deploy into development, test and production environments.After some research, you opt to useElastic Beanstalk due to its tight integration with your developer tools and RDS due to its ease of management.Your QA team lead points out that you need to roll a sanitized set of production data into your environment on a nightly basis.Similarly, other software teams in your org want access to that same restored data via their EC2 instances in your VPC.The optimal setup for persistence and security that meets the above requirements would be the following.Read More →

A startup company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI.The company’s engineers rely heavily on SSH access to the instances for troubleshooting.The company’s existing architecture includes the following:• A VPC with private and public subnets, and a NAT gateway.• Site-to-Site VPN for connectivity with the on-premises environment.• EC2 security groups with direct SSH access from the on-premises environment.The company needs to increase security controls around SSH access and provide auditing of commands run by the engineers.Which strategy should a solutions architect use?Read More →

Your company is in the process of developing a next generation pet collar that collects biometric information to assist families with promoting healthy lifestyles for their pets.Each collar will push 30kb of biometric data in JSON format every 2 seconds to a collection platform that will process and analyze the data providing health trending information back to the pet owners and veterinarians via a web portal.Management has tasked you to architect the collection platform ensuring the following requirements are met.✑ Provide the ability for real-time analytics of the inbound biometric data✑ Ensure processing of the biometric data is highly durable.Elastic and parallel✑ The results of the analytic processing should be persisted for data miningWhich architecture outlined below win meet the initial requirements for the collection platform?Read More →

A company has an organization in AWS Organizations.The company is using AWS Control Tower to deploy a landing zone for the organization.The company wants to implement governance and policy enforcement.The company must implement a policy that will detect Amazon RDS DB instances that are not encrypted at rest in the company’s production OU.Which solution will meet this requirement?Read More →

You’ve been hired to enhance the overall security posture for a very large e-commerce site.They have a well architected multi-tier application running in a VPC that uses ELBs in front of both the web and the app tier with static assets served directly from S3.They are using a combination of RDS and DynamoDB for their dynamic data and then archiving nightly into S3 for further processing with EMR.They are concerned because they found questionable log entries and suspect someone is attempting to gain unauthorized access.Which approach provides a cost effective scalable mitigation to this kind of attack?Read More →

A video processing company has an application that downloads images from an Amazon S3 bucket, processes the images, stores a transformed image in a second S3 bucket, and updates metadata about the image in an Amazon DynamoDB table.The application is written in Node.js and runs by using an AWS Lambda function.The Lambda function is invoked when a new image is uploaded to Amazon S3.The application ran without incident for a while.However, the size of the images has grown significantly.The Lambda function is now failing frequently with timeout errors.The function timeout is set to its maximum value.A solutions architect needs to refactor the application’s architecture to prevent invocation failures.The company does not want to manage the underlying infrastructure.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

Your firm has uploaded a large amount of aerial image data to S3.In the past, in your on-premises environment, you used a dedicated group of servers to oaten process this data and used Rabbit MQ – An open source messaging system to get job information to the servers.Once processed the data would go to tape and be shipped offsite.Your manager told you to stay with the current design, and leverage AWS archival storage and messaging services to minimize cost.Which is correct?Read More →

A company wants to migrate an application to Amazon EC2 from VMware Infrastructure that runs in an on-premises data center.A solutions architect must preserve the software and configuration settings during the migration.What should the solutions architect do to meet these requirements?Read More →

A company is storing data on Amazon Simple Storage Service (S3).The company’s security policy mandates that data is encrypted at rest.Which of the following methods can achieve this? (Choose three.)Read More →