Solutions Architect Professional (Page 55)

A company has an application in the AWS Cloud.The application runs on a fleet of 20 Amazon EC2 instances.The EC2 instances are persistent and store data on multiple attached Amazon Elastic Block Store (Amazon EBS) volumes.The company must maintain backups in a separate AWS Region.The company must be able to recover the EC2 instances and their configuration within 1 business day, with loss of no more than 1 day’s worth of data.The company has limited staff and needs a backup solution that optimizes operational efficiency and cost.The company already has created an AWS CloudFormation template that can deploy the required network configuration in a secondary Region.Which solution will meet these requirements?Read More →

A company is running an application in the AWS Cloud.The company has several third-party services that integrate with the application through a RESTful API.The API is a serverless implementation with an Amazon API Gateway regional API endpoint that integrates with several different AWS Lambda functions.The application’s data is nonrelational and is stored in an Amazon DynamoDB table.The application and the API are running in the eu-west-1 Region.The company needs the API to also be available in the us-east-1 Region.All data must be available in both Regions.A solutions architect already has deployed all the Lambda functions in us-east-1.Which additional steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company needs to migrate 60 on-premises legacy applications to AWS.The applications are based on the NET Framework and run on Windows.The company needs a solution that minimizes migration time and requires no application code changes.The company also does not want to manage the infrastructure.Which solution will meet these requirements?Read More →

A company uses AWS Organizations.The company creates a central VPC in an AWS account that is designated for networking in a single AWS Region.The central VPC has an AWS Site-to-Site VPN connection to the company’s on-premises network.A solutions architect must create another AWS account that uses the same networking resources that the central VPC uses.Which solution meets these requirements MOST cost-effectively?Read More →

A medical company is running a REST API on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group behind an Application Load Balancer (ALB).The ALB runs in three public subnets, and the EC2 instances run in three private subnets.The company has deployed an Amazon CloudFront distribution that has the ALB as the only origin.Which solution should a solutions architect recommend to enhance the origin security?Read More →

A company has millions of objects in an Amazon S3 bucket.The objects are in the S3 Standard storage class.All the S3 objects are accessed frequently.The number of users and applications that access the objects is increasing rapidly.The objects are encrypted with server-side encryption with AWS KMS keys (SSE-KMS).A solutions architect reviews the company’s monthly AWS invoice and notices that AWS KMS costs are increasing because of the high number of requests from Amazon S3.The solutions architect needs to optimize costs with minimal changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is migrating its infrastructure to the AWS Cloud.The company must comply with a variety of regulatory standards for different projects.The company needs a multi-account environment.A solutions architect needs to prepare the baseline infrastructure.The solution must provide a consistent baseline of management and security, but it must allow flexibility for different compliance requirements within various AWS accounts.The solution also needs to integrate with the existing on-premises Active Directory Federation Services (AD FS) server.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.Which solution will meet these requirements?Read More →

A company is migrating mobile banking applications to run on Amazon EC2 instances in a VPC.Backend service applications run in an on-premises data center.The data center has an AWS Direct Connect connection into AWS.The applications that run in the VPC need to resolve DNS requests to an on-premises Active Directory domain that runs in the data center.Which solution will meet these requirements with the LEAST administrative overhead?Read More →

A software development company has multiple engineers who are working remotely.The company is running Active Directory Domain Services (AD DS) on an Amazon EC2 instance.The company’s security policy states that all internal, nonpublic services that are deployed in a VPC must be accessible through a VPN.Multi-factor authentication (MFA) must be used for access to a VPN.What should a solutions architect do to meet these requirements?Read More →