Solutions Architect Professional (Page 64)

You are running a news website in the eu-west-1 region that updates every 15 minutes.The website has a world-wide audience.It uses an Auto Scaling group behind an Elastic Load Balancer and an Amazon RDS database.Static content resides on Amazon S3, and is distributed through Amazon CloudFront.Your AutoScaling group is set to trigger a scale up event at 60% CPU utilization.You use an Amazon RDS extra large DB instance with 10.000 Provisioned IOPS, its CPU utilization is around 80%, while freeable memory is in the 2 GB range.Web analytics reports show that the average load time of your web pages is around 1.5 to 2 seconds, but your SEO consultant wants to bring down the average load time to under 0.5 seconds.How would you improve page load times for your users? (Choose three.)Read More →

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →

A customer has established an AWS Direct Connect connection to AWS.The link is up and routes are being advertised from the customer’s end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.Which of the following options provide a viable solution to remedy this situation? (Choose two.)Read More →

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS.The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC.The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.Which combination of steps will meet these requirements? (Choose two.)Read More →

Your website is serving on-demand training videos to your workforce.Videos are uploaded monthly in high resolution MP4 format.Your workforce is distributed globally often on the move and using company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video.Your company has no video transcoding expertise and it required you may need to pay for a consultant.How do you implement the most cost-efficient architecture without compromising high availability and quality of video delivery?Read More →

A company is using multiple AWS accounts and has multiple DevOps teams running production and non-production workloads in these accounts.The company would like to centrally-restrict access to some of the AWS services that the DevOps teams do not use.The company decided to use AWS Organizations and successfully invited all AWS accounts into the Organization.They would like to allow access to services that are currently in-use and deny a few specific services.Also they would like to administer multiple accounts together as a single unit.What combination of steps should the solutions architect take to satisfy these requirements? (Choose three.)Read More →

IAM users do not have permission to create Temporary Security Credentials for federated users and roles by default.In contrast, IAM users can call __________ without the need of any special permissionsRead More →

A retail company is mounting IoT sensors in all of its stores worldwide.During the manufacturing of each sensor, the company’s private certificate authority (CA) issues an X.509 certificate that contains a unique serial number.The company then deploys each certificate to its respective sensor.A solutions architect needs to give the sensors the ability to send data to AWS after they are installed.Sensors must not be able to send data to AWS until they are installed.Which solution will meet these requirements?Read More →

Within an IAM policy, can you add an IfExists condition at the end of a Null condition?Read More →

A company runs a content management application on a single Windows Amazon EC2 instance in a development environment.The application reads and writes static content to a 2 TB Amazon Elastic Block Store (Amazon EBS) volume that is attached to the instance as the root device.The company plans to deploy this application in production as a highly available and fault-tolerant solution that runs on at least three EC2 instances across multiple Availability Zones.A solutions architect must design a solution that joins all the instances that run the application to an Active Directory domain.The solution also must implement Windows ACLs to control access to file contents.The application always must maintain exactly the same content on all running instances at any given point in time.Which solution will meet these requirements with the LEAST management overhead?Read More →