Solutions Architect Professional (Page 61)

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS.The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC.The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.Which combination of steps will meet these requirements? (Choose two.)Read More →

A customer has established an AWS Direct Connect connection to AWS.The link is up and routes are being advertised from the customer’s end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.Which of the following options provide a viable solution to remedy this situation? (Choose two.)Read More →

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →

You are running a news website in the eu-west-1 region that updates every 15 minutes.The website has a world-wide audience.It uses an Auto Scaling group behind an Elastic Load Balancer and an Amazon RDS database.Static content resides on Amazon S3, and is distributed through Amazon CloudFront.Your AutoScaling group is set to trigger a scale up event at 60% CPU utilization.You use an Amazon RDS extra large DB instance with 10.000 Provisioned IOPS, its CPU utilization is around 80%, while freeable memory is in the 2 GB range.Web analytics reports show that the average load time of your web pages is around 1.5 to 2 seconds, but your SEO consultant wants to bring down the average load time to under 0.5 seconds.How would you improve page load times for your users? (Choose three.)Read More →

A company is developing a new service that will be accessed using TCP on a static port.A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name my.service.com, which is publicly accessible.The service must use fixed address assignments so other companies can add the addresses to their allow lists.Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these requirements?Read More →

A corporate web application is deployed within an Amazon Virtual Private Cloud (VPC) and is connected to the corporate data center via an IPSec VPN.The application must authenticate against the on-premises LDAP server.After authentication, each logged-in user can only access an Amazon Simple Storage Space(S3) keyspace specific to that user.Which two approaches can satisfy these objectives? (Choose two.)Read More →

A company uses an on-premises data analytics platform.The system is highly available in a fully redundant configuration across 12 servers in the company’s data center.The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users.Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs.The scheduled jobs account for 65% of the system usage.User jobs typically finish running in less than 5 minutes and have no SLA.The user jobs account for 35% of system usage.During system failures, scheduled jobs must continue to meet SLAs.However, user jobs can be delayed.A solutions architect needs to move the system to Amazon EC2 instances and adopt a consumption-based model to reduce costs with no long-term commitments.The solution must maintain high availability and must not affect the SLAs.Which solution will meet these requirements MOST cost-effectively?Read More →

Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center and AWS.You recently provisioned a DirectConnect connection and would like to start using the new connection.After configuring DirectConnect settings in the AWS Console, which of the following options win provide the most seamless transition for your users?Read More →

A security engineer determined that an existing application retrieves credentials to an Amazon RDS for MySQL database from an encrypted file in Amazon S3.For the next version of the application, the security engineer wants to implement the following application design changes to improve security:The database must use strong, randomly generated passwords stored in a secure AWS managed service.The application resources must be deployed through AWS CloudFormation.The application must rotate credentials for the database every 90 days.A solutions architect will generate a CloudFormation template to deploy the application.Which resources specified in the CloudFormation template will meet the security engineer’s requirements with the LEAST amount of operational overhead?Read More →

Your company hosts a social media website for storing and sharing documents.The web application allows user to upload large files while resuming and pausing the upload as needed.Currently, files are uploaded to your PHP front end backed by Elastic Load Balancing and an autoscaling fleet of Amazon Elastic ComputeCloud (EC2) instances that scale upon average of bytes received (NetworkIn).After a file has been uploaded, it is copied to Amazon Simple Storage Service (S3).Amazon EC2 instances use an AWS Identity and Access Management (IAM) role that allows Amazon S3 uploads.Over the last six months, your user base and scale have increased significantly, forcing you to increase the Auto Scaling group’s Max parameter a few times.Your CFO is concerned about rising costs and has asked you to adjust the architecture where needed to better optimize costs.Which architecture change could you introduce to reduce costs and still keep your web application secure and scalable?Read More →