Solutions Architect Professional (Page 57)

A company is using an organization in AWS Organizations to manage hundreds of AWS accounts.A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities.The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.Which combination of steps should the solutions architect take to provide the baseline protection? (Choose three.)Read More →

A company is moving a business-critical, multi-tier application to AWS.The architecture consists of a desktop client application and server infrastructure.The server infrastructure resides in an on-premises data center that frequently fails to maintain the application uptime SLA of 99.95%.A Solutions Architect must re- architect the application to ensure that it can meet or exceed the SLA.The application contains a PostgreSQL database running on a single virtual machine.The business logic and presentation layers are load balanced between multiple virtual machines.Remote users complain about slow load times while using this latency-sensitive application.Which of the following will meet the availability requirements with little change to the application while improving user experience and minimizing costs?Read More →

A company needs to migrate an on-premises SFTP site to AWS.The SFTP site currently runs on a Linux VM.Uploaded files are made available to downstream applications through an NFS share.As part of the migration to AWS, a solutions architect must implement high availability.The solution must provide external vendors with a set of static public IP addresses that the vendors can allow.The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is building an AWS landing zone and has asked a Solutions Architect to design a multi-account access strategy that will allow hundreds of users to use corporate credentials to access the AWS Console.The company is running a Microsoft Active Directory, and users will use an AWS Direct Connect connection to connect to AWS.The company also wants to be able to federate to third-party services and providers, including custom applications.Which solution meets the requirements by using the LEAST amount of management overhead?Read More →

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service.Which of the below mentioned statements helps the user understand detailed monitoring better?Read More →

A company is planning to migrate several applications to AWS.The company does not have a good understanding of its entire application estate.The estate consists of a mixture of physical machines and VMs.One application that the company will migrate has many dependencies that are sensitive to latency.The company is unsure what all the dependencies are.However the company knows that the low-latency communications use a custom IP-based protocol that runs on port 1000.The company wants to migrate the application and these dependencies together to move all the low-latency interfaces to AWS at the same time.The company has installed the AWS Application Discovery Agent and has been collecting data for several months.What should the company do to identify the dependencies that need to be migrated in the same phase as the application?Read More →

A company is using AWS Single Sign-On (AWS SSO) to centrally manage permissions and access to multiple AWS accounts in AWS Organizations.A solutions architect needs to provide users with granular access to AWS accounts based on different job functions.What should the solutions architect do to meet these requirements?Read More →

A company is storing sensitive data in an Amazon S3 bucket.The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years.The company’s security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket.Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)Read More →

A financial services company loaded millions of historical stock trades into an Amazon DynamoDB table.The table uses on-demand capacity mode.Once each day at midnight, a few million new records are loaded into the table.Application read activity against the table happens in bursts throughout the day, and a limited set of keys are repeatedly looked up.The company needs to reduce costs associated with DynamoDB.Which strategy should a solutions architect recommend to meet this requirement?Read More →