Solutions Architect Professional (Page 60)

Within the IAM service a GROUP is regarded as a:Read More →

A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number (PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →

In AWS, which security aspects are the customer’s responsibility? (Choose four.)Read More →

A company gives users the ability to upload images from a custom application.The upload process invokes an AWS Lambda function that processes and stores the image in an Amazon S3 bucket.The application invokes the Lambda function by using a specific function version ARN.The Lambda function accepts image processing parameters by using environment variables.The company often adjusts the environment variables of the Lambda function to achieve optimal image processing output.The company tests different parameters and publishes a new function version with the updated environment variables after validating results.This update process also requires frequent changes to the custom application to invoke the new function version ARN.These changes cause interruptions for users.A solutions architect needs to simplify this process to minimize disruption to users.Which solution will meet these requirements with the LEAST operational overhead?Read More →

Your application provides data transformation services.Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances.Files submitted by your premium customers must be transformed with the highest priority.How should you implement such a system?Read More →

A global media company is planning a multi-Region deployment of an application.Amazon DynamoDB global tables will back the deployment to keep the user experience consistent across the two continents where users are concentrated.Each deployment will have a public Application Load Balancer (ALB).The company manages public DNS internally.The company wants to make the application available through an apex domain.Which solution will meet these requirements with the LEAST effort?Read More →

A company has developed a new billing application that will be released in two weeks.Developers are testing the application running on 10 EC2 instances managed by an Auto Scaling group in subnet 172.31.0.0/24 within VPC A with CIDR block 172.31.0.0/16.The Developers noticed connection timeout errors in the application logs while connecting to an Oracle database running on an Amazon EC2 instance in the same region within VPC B with CIDR block 172.50.0.0/16.The IP of the database instance is hard-coded in the application instances.Which recommendations should a Solutions Architect present to the Developers to solve the problem in a secure way with minimal maintenance and overhead?Read More →

A manufacturing company is building an inspection solution for its factory.The company has IP cameras at the end of each assembly line.The company has used Amazon SageMaker to train a machine learning (ML) model to identify common defects from still images.The company wants to provide local feedback to factory workers when a defect is detected.The company must be able to provide this feedback even if the factory’s internet connectivity is down.The company has a local Linux server that hosts an API that provides local feedback to the workers.How should the company deploy the ML model to meet these requirements?Read More →

A mobile gaming company is expanding into the global market.The company’s game servers run in the us-east-1 Region.The game’s client application uses UDP to communicate with the game servers and needs to be able to connect to a set of static IP addresses.The company wants its game to be accessible on multiple continents.The company also wants the game to maintain its network performance and global availability.Which solution meets these requirements?Read More →

A company has a critical application in which the data tier is deployed in a single AWS Region.The data tier uses an Amazon DynamoDB table and an Amazon Aurora MySQL DB cluster.The current Aurora MySQL engine version supports a global database.The application tier is already deployed in two Regions.Company policy states that critical applications must have application tier components and data tier components deployed across two Regions.The RTO and RPO must be no more than a few minutes each.A solutions architect must recommend a solution to make the data tier compliant with company policy.Which combination of steps will meet these requirements? (Choose two.)Read More →