Solutions Architect Professional (Page 67)

A company’s site reliability engineer is performing a review of Amazon FSx for Windows File Server deployments within an account that the company acquired.Company policy states that all Amazon FSx file systems must be configured to be highly available across Availability Zones.During the review, the site reliability engineer discovers that one of the Amazon FSx file systems used a deployment type of Single-AZ 2.A solutions architect needs to minimize downtime while aligning this Amazon FSx file system with company policy.What should the solutions architect do to meet these requirements?Read More →

A company is creating a solution that can move 400 employees into a remote working environment in the event of an unexpected disaster.The user desktops have a mix of Windows and Linux operating systems.Multiple types of software, such as web browsers and mail clients, are installed on each desktop.A solutions architect needs to implement a solution that can be integrated with the company’s on-premises Active Directory to allow employees to use their existing identity credentials.The solution must provide multifactor authentication (MFA) and must replicate the user experience from the existing desktops.Which solution will meet these requirements?Read More →

A company has a single AWS master billing account, which is the root of the AWS Organizations hierarchy.The company has multiple AWS accounts within this hierarchy, all organized into organization units (OUs).More OUs and AWS accounts will continue to be created as other parts of the business migrate applications to AWS.These business units may need to use different AWS services.The Security team is implementing the following requirements for all current and future AWS accounts:✑ Control policies must be applied across all accounts to prohibit AWS servers.✑ Exceptions to the control policies are allowed based on valid use cases.Which solution will meet these requirements with minimal optional overhead?Read More →

A solutions architect has implemented a SAML 2.0 federated identity solution with their company’s on-premises identity provider (IdP) to authenticate users’ access to the AWS environment.When the solutions architect tests authentication through the federated identity web portal, access to the AWS environment is granted.However, when test users attempt to authenticate through the federated identity web portal, they are not able to access the AWS environment.Which items should the solutions architect check to ensure identity federation is properly configured? (Choose three.)Read More →

A company wants to use Amazon WorkSpaces in combination with thin client devices to replace aging desktops.Employees use the desktops to access applications that work with clinical trial data.Corporate security policy states that access to the applications must be restricted to only company branch office locations.The company is considering adding an additional branch office in the next 6 months.Which solution meets these requirements with the MOST operational efficiency?Read More →

A software as a service (SaaS) based company provides a case management solution to customers A3 part of the solution.The company uses a standalone Simple Mail Transfer Protocol (SMTP) server to send email messages from an application.The application also stores an email template for acknowledgement email messages that populate customer data before the application sends the email message to the customer.The company plans to migrate this messaging functionality to the AWS Cloud and needs to minimize operational overhead.Which solution will meet these requirements MOST cost-effectively?Read More →

A company hosts a legacy application that runs on an Amazon EC2 instance inside a VPC without internet access.Users access the application with a desktop program installed on their corporate laptops.Communication between the laptops and the VPC flows through AWS Direct Connect (DX).A new requirement states that all data in transit must be encrypted between users and the VPC.Which strategy should a solutions architect use to maintain consistent network performance while meeting this new requirement?Read More →

Accompany is deploying a new cluster for big data analytics on AWS.The cluster will run across many Linux Amazon EC2 instances that are spread across multiple Availability Zones.All of the nodes in the cluster must have read and write access to common underlying file storage.The file storage must be highly available, must be resilient, must be compatible with the Portable Operating System Interface (POSIX), and must accommodate high levels of throughput.Which storage solution will meet these requirements?Read More →

A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company uses AWS Control Tower for governance and uses AWS Transit Gateway for VPC connectivity across accounts.In an AWS application account, the company’s application team has deployed a web application that uses AWS Lambda and Amazon RDS.The company’s database administrators have a separate DBA account and use the account to centrally manage all the databases across the organization.The database administrators use an Amazon EC2 instance that is deployed in the DBA account to access an RDS database that is deployed in the application account.The application team has stored the database credentials as secrets in AWS Secrets Manager in the application account.The application team is manually sharing the secrets with the database administrators.The secrets are encrypted by the default AWS managed key for Secrets Manager in the application account.A solutions architect needs to implement a solution that gives the database administrators access to the database and eliminates the need to manually share the secrets.Which solution will meet these requirements?Read More →

A solutions architect needs to migrate an on-premises legacy application to AWS. The application runs on two servers behind a load balancer. The application requires a license file that is associated with the MAC address of the server’s network adapter It takes the software vendor 12 hours to send new license files. The application also uses configuration files with a static IP address to access a database server, host names are not supported.Given these requirements, which combination of steps should be taken to implement highly available architecture for the application servers in AWS? (Choose two.)Read More →