Solutions Architect Professional (Page 63)

Your company produces customer commissioned one-of-a-kind skiing helmets combining nigh fashion with custom technical enhancements Customers can show off their Individuality on the ski slopes and have access to head-up-displays. GPS rear-view cams and any other technical innovation they wish to embed in the helmet.The current manufacturing process is data rich and complex including assessments to ensure that the custom electronics and materials used to assemble the helmets are to the highest standards Assessments are a mixture of human and automated assessments you need to add a new set of assessment to model the failure modes of the custom electronics using GPUs with CUDA, across a cluster of servers with low latency networking.What architecture would allow you to automate the existing process using a hybrid approach and ensure that the architecture can support the evolution of processes over time?Read More →

A company that has multiple AWS accounts is using AWS Organizations.The company’s AWS accounts host VPCs, Amazon EC2 instances, and containers.The company’s compliance team has deployed a security tool in each VPC where the company has deployments.The security tools run on EC2 instances and send information to the AWS account that is dedicated for the compliance team.The company has tagged all the compliance-related resources with a key of “costCenter” and a value or “compliance”.The company wants to identify the cost of the security tools that are running on the EC2 instances so that the company can charge the compliance team’s AWS account.The cost calculation must be as accurate as possible.What should a solutions architect do to meet these requirements?Read More →

You require the ability to analyze a customer’s clickstream data on a website so they can do behavioral analysis.Your customer needs to know what sequence of pages and ads their customer clicked on.This data will be used in real time to modify the page layouts as customers click through the site to increase stickiness and advertising click-through.Which option meets the requirements for captioning and analyzing this data?Read More →

A company is storing data in several Amazon DynamoDB tables.A solutions architect must use a serverless architecture to make the data accessible publicly through a simple API over HTTPS.The solution must scale automatically in response to demand.Which solutions meet these requirements? (Choose two.)Read More →

Your company hosts a social media website for storing and sharing documents.The web application allows user to upload large files while resuming and pausing the upload as needed.Currently, files are uploaded to your PHP front end backed by Elastic Load Balancing and an autoscaling fleet of Amazon Elastic ComputeCloud (EC2) instances that scale upon average of bytes received (NetworkIn).After a file has been uploaded, it is copied to Amazon Simple Storage Service (S3).Amazon EC2 instances use an AWS Identity and Access Management (IAM) role that allows Amazon S3 uploads.Over the last six months, your user base and scale have increased significantly, forcing you to increase the Auto Scaling group’s Max parameter a few times.Your CFO is concerned about rising costs and has asked you to adjust the architecture where needed to better optimize costs.Which architecture change could you introduce to reduce costs and still keep your web application secure and scalable?Read More →

A security engineer determined that an existing application retrieves credentials to an Amazon RDS for MySQL database from an encrypted file in Amazon S3.For the next version of the application, the security engineer wants to implement the following application design changes to improve security:The database must use strong, randomly generated passwords stored in a secure AWS managed service.The application resources must be deployed through AWS CloudFormation.The application must rotate credentials for the database every 90 days.A solutions architect will generate a CloudFormation template to deploy the application.Which resources specified in the CloudFormation template will meet the security engineer’s requirements with the LEAST amount of operational overhead?Read More →

Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center and AWS.You recently provisioned a DirectConnect connection and would like to start using the new connection.After configuring DirectConnect settings in the AWS Console, which of the following options win provide the most seamless transition for your users?Read More →

A company uses an on-premises data analytics platform.The system is highly available in a fully redundant configuration across 12 servers in the company’s data center.The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users.Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs.The scheduled jobs account for 65% of the system usage.User jobs typically finish running in less than 5 minutes and have no SLA.The user jobs account for 35% of system usage.During system failures, scheduled jobs must continue to meet SLAs.However, user jobs can be delayed.A solutions architect needs to move the system to Amazon EC2 instances and adopt a consumption-based model to reduce costs with no long-term commitments.The solution must maintain high availability and must not affect the SLAs.Which solution will meet these requirements MOST cost-effectively?Read More →

A corporate web application is deployed within an Amazon Virtual Private Cloud (VPC) and is connected to the corporate data center via an IPSec VPN.The application must authenticate against the on-premises LDAP server.After authentication, each logged-in user can only access an Amazon Simple Storage Space(S3) keyspace specific to that user.Which two approaches can satisfy these objectives? (Choose two.)Read More →

A company is developing a new service that will be accessed using TCP on a static port.A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name my.service.com, which is publicly accessible.The service must use fixed address assignments so other companies can add the addresses to their allow lists.Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these requirements?Read More →