Solutions Architect Professional (Page 67)

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →

A company is hosting an application on AWS for a project that will run for the next 3 years.The application consists of 20 Amazon EC2 On-Demand Instances that are registered in a target group for a Network Load Balancer (NLB).The instances are spread across two Availability Zones.The application is stateless and runs 24 hours a day, 7 days a week.The company receives reports from users who are experiencing slow responses from the application.Performance metrics show that the instances are at 10% CPU utilization during normal application use.However, the CPU utilization increases to 100% at busy times, which typically last for a few hours.The company needs a new architecture to resolve the problem of slow responses from the application.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has hundreds of AWS accounts.The company recently implemented a centralized internal process for purchasing new Reserved Instances and modifying existing Reserved Instances.This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement.Previously, business units directly purchased or modified Reserved Instances in their own respective AWS accounts autonomously.A solutions architect needs to enforce the new process in the most secure way possible.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company has set up its entire infrastructure on AWS.The company uses Amazon EC2 instances to host its ecommerce website and uses Amazon S3 to store static data.Three engineers at the company handle the cloud administration and development through one AWS account.Occasionally, an engineer alters an EC2 security group configuration of another engineer and causes noncompliance issues in the environment.A solutions architect must set up a system that tracks changes that the engineers make.The system must send alerts when the engineers make noncompliant changes to the security settings for the EC2 instances.What is the FASTEST way for the solutions architect to meet these requirements?Read More →

A financial services company loaded millions of historical stock trades into an Amazon DynamoDB table.The table uses on-demand capacity mode.Once each day at midnight, a few million new records are loaded into the table.Application read activity against the table happens in bursts throughout the day, and a limited set of keys are repeatedly looked up.The company needs to reduce costs associated with DynamoDB.Which strategy should a solutions architect recommend to meet this requirement?Read More →

A company is storing sensitive data in an Amazon S3 bucket.The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years.The company’s security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket.Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)Read More →

A company is using AWS Single Sign-On (AWS SSO) to centrally manage permissions and access to multiple AWS accounts in AWS Organizations.A solutions architect needs to provide users with granular access to AWS accounts based on different job functions.What should the solutions architect do to meet these requirements?Read More →

A company is planning to migrate several applications to AWS.The company does not have a good understanding of its entire application estate.The estate consists of a mixture of physical machines and VMs.One application that the company will migrate has many dependencies that are sensitive to latency.The company is unsure what all the dependencies are.However the company knows that the low-latency communications use a custom IP-based protocol that runs on port 1000.The company wants to migrate the application and these dependencies together to move all the low-latency interfaces to AWS at the same time.The company has installed the AWS Application Discovery Agent and has been collecting data for several months.What should the company do to identify the dependencies that need to be migrated in the same phase as the application?Read More →

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service.Which of the below mentioned statements helps the user understand detailed monitoring better?Read More →

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →