Solutions Architect Professional (Page 61)

A company has an organization in AWS Organizations that has a large number of AWS accounts.One of the AWS accounts is designated as a transit account and has a transit gateway that is shared with all of the other AWS accounts.AWS Site-to-Site VPN connections are configured between all of the company’s global offices and the transit account.The company has AWS Config enabled on all of its accounts.The company’s networking team needs to centrally manage a list of internal IP address ranges that belong to the global offices.Developers will reference this list to gain access to their applications securely.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A solutions architect must create a business case for migration of a company’s on-premises data center to the AWS Cloud.The solutions architect will use a configuration management database (CMDB) export of all the company’s servers to create the case.Which solution will meet these requirements MOST cost-effectively?Read More →

An AWS account owner has setup multiple IAM users.One of these IAM users, named John, has CloudWatch access, but no access to EC2 services.John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit.When an EC2 instance’s CPU Utilization rate drops below the threshold John has set, what will happen and why?Read More →

A company runs an application on a fleet of Amazon EC2 instances that are in private subnets behind an internet-facing Application Load Balancer (ALB).The ALB is the origin for an Amazon CloudFront distribution.An AWS WAF web ACL that contains various AWS managed rules is associated with the CloudFront distribution.The company needs a solution that will prevent internet traffic from directly accessing the ALB.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A greeting card company recently advertised that customers could send cards to their favorite celebrities through the company’s platform.Since the advertisement was published, the platform has received constant traffic from 10,000 unique users each second.The platform runs on m5.xlarge Amazon EC2 instances behind an Application Load Balancer (ALB).The instances run in an Auto Scaling group and use a customAMI that is based on Amazon Linux.The platform uses a highly available Amazon Aurora MySQL DB cluster that uses primary and reader endpoints.The platform also uses an Amazon ElastiCache for Redis cluster that uses its cluster endpoint.The platform generates a new process for each customer and holds open database connections to MySQL for the duration of each customer’s session.However, resource usage for the platform is low.Many customers are reporting errors when they connect to the platform.Logs show that connections to the Aurora database are failing.Amazon CloudWatch metrics show that the CPU load is low across the platform and that connections to the platform are successful through the ALB.Which solution will remediate the errors MOST cost-effectively?Read More →

A company has a few AWS accounts for development and wants to move its production application to AWS.The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current production accounts and future production accounts only.The company needs a solution that includes built-in blueprints and guardrails.Which combination of steps will meet these requirements? (Choose three.)Read More →

A solutions architect is designing a solution to connect a company’s on-premises network with all the company’s current and future VPCs on AWS.The company is running VPCs in five different AWS Regions and has at least 15 VPCs in each Region.The company’s AWS usage is constantly increasing and will continue to grow.Additionally, all the VPCs throughout all five Regions must be able to communicate with each other.The solution must maximize scalability and ease of management.Which solution meets these requirements?Read More →

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWS CodeCommit repository.The security team wants to automatically find and remediate instances of this security vulnerability.Which solution will ensure that the credentials are appropriately secured automatically?Read More →

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services.The company’s CIO has asked a Solutions Architect to design a simple, highly available, and loosely coupled order processing application.The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table.The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays.Which of the following is the MOST reliable approach to meet the requirements?Read More →

A company has automated the nightly retraining of its machine learning models by using AWS Step Functions.The workflow consists of multiple steps that use AWS Lambda.Each step can fail for various reasons, and any failure causes a failure of the overall workflow.A review reveals that the retraining has failed multiple nights in a row without the company noticing the failure.A solutions architect needs to improve the workflow so that notifications are sent for all types of failures in the retraining process.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →