Solutions Architect Professional (Page 64)

A company runs an application on a fleet of Amazon EC2 instances that are in private subnets behind an internet-facing Application Load Balancer (ALB).The ALB is the origin for an Amazon CloudFront distribution.An AWS WAF web ACL that contains various AWS managed rules is associated with the CloudFront distribution.The company needs a solution that will prevent internet traffic from directly accessing the ALB.Which solution will meet these requirements with the LEAST operational overhead?Read More →

An AWS account owner has setup multiple IAM users.One of these IAM users, named John, has CloudWatch access, but no access to EC2 services.John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit.When an EC2 instance’s CPU Utilization rate drops below the threshold John has set, what will happen and why?Read More →

A solutions architect must create a business case for migration of a company’s on-premises data center to the AWS Cloud.The solutions architect will use a configuration management database (CMDB) export of all the company’s servers to create the case.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has an organization in AWS Organizations that has a large number of AWS accounts.One of the AWS accounts is designated as a transit account and has a transit gateway that is shared with all of the other AWS accounts.AWS Site-to-Site VPN connections are configured between all of the company’s global offices and the transit account.The company has AWS Config enabled on all of its accounts.The company’s networking team needs to centrally manage a list of internal IP address ranges that belong to the global offices.Developers will reference this list to gain access to their applications securely.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company has a critical application in which the data tier is deployed in a single AWS Region.The data tier uses an Amazon DynamoDB table and an Amazon Aurora MySQL DB cluster.The current Aurora MySQL engine version supports a global database.The application tier is already deployed in two Regions.Company policy states that critical applications must have application tier components and data tier components deployed across two Regions.The RTO and RPO must be no more than a few minutes each.A solutions architect must recommend a solution to make the data tier compliant with company policy.Which combination of steps will meet these requirements? (Choose two.)Read More →

A mobile gaming company is expanding into the global market.The company’s game servers run in the us-east-1 Region.The game’s client application uses UDP to communicate with the game servers and needs to be able to connect to a set of static IP addresses.The company wants its game to be accessible on multiple continents.The company also wants the game to maintain its network performance and global availability.Which solution meets these requirements?Read More →

A manufacturing company is building an inspection solution for its factory.The company has IP cameras at the end of each assembly line.The company has used Amazon SageMaker to train a machine learning (ML) model to identify common defects from still images.The company wants to provide local feedback to factory workers when a defect is detected.The company must be able to provide this feedback even if the factory’s internet connectivity is down.The company has a local Linux server that hosts an API that provides local feedback to the workers.How should the company deploy the ML model to meet these requirements?Read More →

A company has developed a new billing application that will be released in two weeks.Developers are testing the application running on 10 EC2 instances managed by an Auto Scaling group in subnet 172.31.0.0/24 within VPC A with CIDR block 172.31.0.0/16.The Developers noticed connection timeout errors in the application logs while connecting to an Oracle database running on an Amazon EC2 instance in the same region within VPC B with CIDR block 172.50.0.0/16.The IP of the database instance is hard-coded in the application instances.Which recommendations should a Solutions Architect present to the Developers to solve the problem in a secure way with minimal maintenance and overhead?Read More →

A global media company is planning a multi-Region deployment of an application.Amazon DynamoDB global tables will back the deployment to keep the user experience consistent across the two continents where users are concentrated.Each deployment will have a public Application Load Balancer (ALB).The company manages public DNS internally.The company wants to make the application available through an apex domain.Which solution will meet these requirements with the LEAST effort?Read More →

Your application provides data transformation services.Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances.Files submitted by your premium customers must be transformed with the highest priority.How should you implement such a system?Read More →