Solutions Architect Professional (Page 6)

A company has an application that runs on Amazon EC2 instances in an Amazon EC2 Auto Scaling group.The company uses AWS CodePipeline to deploy the application.The instances that run in the Auto Scaling group are constantly changing because of scaling events.When the company deploys new application code versions, the company installs the AWS CodeDeploy agent on any new target EC2 instances and associates the instances with the CodeDeploy deployment group.The application is set to go live within the next 24 hours.What should a solutions architect recommend to automate the application deployment process with the LEAST amount of operational overhead?Read More →

A large payroll company recently merged with a small staffing company.The unified company now has multiple business units, each with its own existing AWS account.A solutions architect must ensure that the company can centrally manage the billing and access policies for all the AWS accounts.The solutions architect configures AWS Organizations by sending an invitation to all member accounts of the company from a centralized management account.What should the solutions architect do next to meet these requirements?Read More →

A company’s lease of a colocated storage facility will expire in 90 days.The company wants to move to AWS to avoid signing a contract extension.The company’s environment consists of 200 virtual machines and a NAS with 40 TB of data.Most of the data is archival, yet instant access is required when data is requested.Leadership wants to ensure minimal downtime during the migration.Each virtual machine has a number of customized configurations.The company’s existing 1Gbps network connection is mostly idle, especially after business hours.Which combination of steps should the company take to migrate to AWS while minimizing downtime and operational impact? (Choose two.)Read More →

A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company uses AWS Control Tower for governance and uses AWS Transit Gateway for VPC connectivity across accounts.In an AWS application account, the company’s application team has deployed a web application that uses AWS Lambda and Amazon RDS.The company’s database administrators have a separate DBA account and use the account to centrally manage all the databases across the organization.The database administrators use an Amazon EC2 instance that is deployed in the DBA account to access an RDS database that is deployed m the application account.The application team has stored the database credentials as secrets in AWS Secrets Manager in the application account.The application team is manually sharing the secrets with the database administrators.The secrets are encrypted by the default AWS managed key for Secrets Manager in the application account.A solutions architect needs to implement a solution that gives the database administrators access to the database and eliminates the need to manually share the secrets.Which solution will meet these requirements?Read More →

A hybrid network architecture must be used during a company’s multi-year data center migration from multiple private data centers to AWS.The current data centers are linked together with private fiber.Due to unique legacy applications, NAT cannot be used.During the migration period, many applications will need access to other applications in both the data centers and AWS.Which option offers a hybrid network architecture that is secure and highly available, that allows for high bandwidth and a multi-region deployment post-migration?Read More →

A company has an application that runs on Amazon EC2 instances in an Amazon EC2 Auto Scaling group.The company uses AWS CodePipeline to deploy the application.The instances that run in the Auto Scaling group are constantly changing because of scaling events.When the company deploys new application code versions, the company installs the AWS CodeDeploy agent on any new target EC2 instances and associates the instances with the CodeDeploy deployment group.The application is set to go live within the next 24 hours.What should a solutions architect recommend to automate the application deployment process with the LEAST amount of operational overhead?Read More →

A company has an application that generates reports and stores them in an Amazon bucket Amazon S3 bucket.When a user accesses their report, the application generates a signed URL to allow the user to download the report.The company’s security team has discovered that the files are public and that anyone can download them without authentication.The company has suspended the generation of new reports until the problem is resolved.Which set of action will immediately remediate the security issue without impacting the application’s normal workflow?Read More →

A financial services company runs a complex, multi-tier application on Amazon EC2 instances and AWS Lambda functions.The application stores temporary data in Amazon S3.The S3 objects are valid for only 45 minutes and are deleted after 24 hours.The company deploys each version of the application by launching an AWS CloudFormation stack.The stack creates all resources that are required to run the application.When the company deploys and validates a new application version, the company deletes the CloudFormation stack of the old version.The company recently tried to delete the CloudFormation stack of an old application version, but the operation failed.An analysis shows that CloudFormation failed to delete an existing S3 bucket.A solutions architect needs to resolve this issue without making major changes to the application’s architecture.Which solution meets these requirements?Read More →

A company has been using a third-party provider for its content delivery network and recently decided to switch to Amazon CloudFront.The development team wants to maximize performance for the global user base.The company uses a content management system (CMS) that serves both static and dynamic content.The CMS is behind an Application Load Balancer (ALB) which is set as the default origin for the distribution.Static assets are served from an Amazon S3 bucket.The Origin Access Identity (OAI) was created properly and the S3 bucket policy has been updated to allow the GetObject action from the OAI, but static assets are receiving a 404 error.Which combination of steps should the solutions architect take to fix the error? (Choose two.)Read More →

A company has developed a hybrid solution between its data center and AWS.The company uses Amazon VPC and Amazon EC2 instances that send application logs to Amazon CloudWatch.The EC2 instances read data from multiple relational databases that are hosted on premises.The company wants to monitor which EC2 instances are connected to the databases in near-real time.The company already has a monitoring solution that uses Splunk on premises.A solutions architect needs to determine how to send networking traffic to Splunk.How should the solutions architect meet these requirements?Read More →