Solutions Architect Professional (Page 68)

A company is building an AWS landing zone and has asked a Solutions Architect to design a multi-account access strategy that will allow hundreds of users to use corporate credentials to access the AWS Console.The company is running a Microsoft Active Directory, and users will use an AWS Direct Connect connection to connect to AWS.The company also wants to be able to federate to third-party services and providers, including custom applications.Which solution meets the requirements by using the LEAST amount of management overhead?Read More →

A company needs to migrate an on-premises SFTP site to AWS.The SFTP site currently runs on a Linux VM.Uploaded files are made available to downstream applications through an NFS share.As part of the migration to AWS, a solutions architect must implement high availability.The solution must provide external vendors with a set of static public IP addresses that the vendors can allow.The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is moving a business-critical, multi-tier application to AWS.The architecture consists of a desktop client application and server infrastructure.The server infrastructure resides in an on-premises data center that frequently fails to maintain the application uptime SLA of 99.95%.A Solutions Architect must re- architect the application to ensure that it can meet or exceed the SLA.The application contains a PostgreSQL database running on a single virtual machine.The business logic and presentation layers are load balanced between multiple virtual machines.Remote users complain about slow load times while using this latency-sensitive application.Which of the following will meet the availability requirements with little change to the application while improving user experience and minimizing costs?Read More →

A company is using an organization in AWS Organizations to manage hundreds of AWS accounts.A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities.The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.Which combination of steps should the solutions architect take to provide the baseline protection? (Choose three.)Read More →

A company uses multiple AWS accounts in a single AWS Region.A solutions architect is designing a solution to consolidate logs generated by Elastic LoadBalancers (ELBs) in the AppDev, AppTest, and AppProd accounts.The logs should be stored in an existing Amazon S3 bucket named s3-elb-logs in the centralAWS account.The central account is used for log consolidation only and does not have ELBs deployed.ELB logs must be encrypted at rest.Which combination of steps should the solutions architect take to build the solution? (Choose two.)Read More →

A company uses a load balancer to distribute traffic to Amazon EC2 instances in a single Availability Zone.The company is concerned about security and wants a solutions architect to re-architect the solution to meet the following requirements:• Inbound requests must be filtered for common vulnerability attacks.• Rejected requests must be sent to a third-party auditing application.• All resources should be highly available.Which solution meets these requirements?Read More →

A company has set up a multi-account AWS environment by using AWS Control Tower.Each AWS account that AWS Control Tower creates has its own VPC.The company is developing an application that will integrate with many microservices.The company has designated a specific account to host the application.The company will deploy the microservices on Amazon EC2 instances and will implement the microservices across multiple AWS accounts.The microservices require a high degree of interconnectivity.The company needs a solution that will give the application the ability to communicate privately with the microservices.The solution also must minimize cost and operational overhead.Which solution will meet these requirements?Read More →

A company uses a Grafana data visualization solution that runs on a single Amazon EC2 instance to monitor the health of the company’s AWS workloads.The company has invested time and effort to create dashboards that the company wants to preserve.The dashboards need to be highly available and cannot be down for longer than 10 minutes.The company needs to minimize ongoing maintenance.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is running a distributed application on a set of Amazon EC2 instances in an Auto Scaling group.The application stores large amounts of data on anAmazon Elastic File System (Amazon EFS) file system, and new data is generated monthly.The company needs to back up the data in a secondary AWS Region to restore from in case of a performance problem in its primary Region.The company has an RTO of 1 hour.A solutions architect needs to create a backup strategy while minimizing the extra cost.Which backup strategy should the solutions architect recommend to meet these requirements?Read More →

A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company’s finance team has a data processing application that uses AWS Lambda and Amazon DynamoDB.The company’s marketing team wants to access the data that is stored in the DynamoDB table.The DynamoDB table contains confidential data.The marketing team can have access to only specific attributes of data in the DynamoDB table.The finance team and the marketing team have separate AWS accounts.What should a solutions architect do to provide the marketing team with the appropriate access to the DynamoDB table?Read More →