Solutions Architect Professional (Page 54)

A financial services company has an asset management product that thousands of customers use around the world.The customers provide feedback about the product through surveys.The company is building a new analytical solution that runs on Amazon EMR to analyze the data from these surveys.The following user personas need to access the analytical solution to perform different actions:• Administrator: Provisions the EMR cluster for the analytics team based on the team’s requirements• Data engineer: Runs ETL scripts to process, transform, and enrich the datasets• Data analyst: Runs SQL and Hive queries on the dataA solutions architect must ensure that all the user personas have least privilege access to only the resources that they need.The user personas must be able to launch only applications that are approved and authorized.The solution also must ensure tagging for all resources that the user personas create.Which solution will meet these requirements?Read More →

Which of the following statements is correct about AWS Direct Connect?Read More →

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →

Which of the following does Amazon DynamoDB perform?Read More →

A company has a latency-sensitive trading platform that uses Amazon DynamoDB as a storage backend.The company configured the DynamoDB table to use on-demand capacity mode.A solutions architect needs to design a solution to improve the performance of the trading platform.The new solution must ensure high availability for the trading platform.Which solution will meet these requirements with the LEAST latency?Read More →

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ׀¢׀’ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

A software-as-a-service (SaaS) provider exposes APIs through an Application Load Balancer (ALB).The ALB connects to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that is deployed in the us-east-1 Region.The exposed APIs contain usage of a few non-standard REST methods: LINK, UNLINK, LOCK, and UNLOCK.Users outside the United States are reporting long and inconsistent response times for these APIs.A solutions architect needs to resolve this problem with a solution that minimizes operational overhead.Which solution meets these requirements?Read More →

A media company has a static web application that is generated programmatically.The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront.The build pipeline runs inside a Build Account.The S3 bucket and CloudFront distribution are in a Distribution Account.The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account.The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI).During testing all attempts to access the application using the CloudFront URL result in anHTTP 403 Access Denied response.What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?Read More →

A company is running an application that uses an Amazon ElastiCache for Redis cluster as a caching layer.A recent security audit revealed that the company has configured encryption at rest for ElastiCache.However, the company did not configure ElastiCache to use encryption in transit.Additionally, users can access the cache without authentication.A solutions architect must make changes to require user authentication and to ensure that the company is using end-to-end encryption.Which solution will meet these requirements?Read More →

A company hosts a blog post application on AWS using Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.The application currently does not useAPI keys to authorize requests.The API model is as follows:GET/posts/[postid] to get post detailsGET/users[userid] to get user detailsGET/comments/[commentid] to get comments detailsThe company has noticed users are actively discussing topics in the comments section, and the company wants to increase user engagement by marking the comments appears in real time.Which design should be used to reduce comment latency and improve user experience?Read More →