Solutions Architect Professional (Page 72)

A company that develops consumer electronics with offices in Europe and Asia has 60 TB of software images stored on premises in Europe.The company wants to transfer the images to an Amazon S3 bucket in the ap-northeast-1 Region.New software images are created daily and must be encrypted in transit.The company needs a solution that does not require custom development to automatically transfer all existing and new software images to Amazon S3.What is the next step in the transfer process?Read More →

A company has several AWS Lambda functions written in Python.The functions are deployed with the .zip package deployment type.The functions use a Lambda layer that contains common libraries and packages in a .zip file.The Lambda .zip packages and Lambda layer .zip file are stored in an Amazon S3 bucket.The company must implement automatic scanning of the Lambda functions and the Lambda layer to identify CVEs.A subset of the Lambda functions must receive automated code scans to detect potential data leaks and other vulnerabilities.The code scans must occur only for selected Lambda functions, not all the Lambda functions.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company that is developing a mobile game is making game assets available in two AWS Regions.Game assets are served from a set of Amazon EC2 instances behind an Application Load Balancer (ALB) in each Region.The company requires game assets to be fetched from the closest Region.If game assets become unavailable in the closest Region, they should be fetched from the other Region.What should a solutions architect do to meet these requirements?Read More →

A company is migrating its data center to the AWS Cloud and needs to complete the migration as quickly as possible.The company has many applications that are running on hundreds of VMware VMs in the data center.Each VM is configured with a shared Windows folder that contains common shared files.The file share is larger than 100 GB in size.The company’s compliance team requires a change request to be fled and approved for every software installation and modification to each VM.The company has an AWS Direct Connect connection with 10 GB of bandwidth between AWS and the data center.Which set of steps should the company take to complete the migration in the LEAST amount of time?Read More →

A company has developed a custom tool used in its workflow that runs within a Docker container.The company must perform manual steps each time the container code is updated to make the container image available to new workflow executions.The company wants to automate this process to eliminate manual effort and ensure a new container image is generated every time the tool code is updated.Which combination of actions should a solutions architect take to meet these requirements? (Choose three.)Read More →

A media company has a 30-T8 repository of digital news videos.These videos are stored on tape in an on-premises tape library and referenced by a Media Asset Management (MAM) system.The company wants to enrich the metadata for these videos in an automated fashion and put them into a searchable catalog by using a MAM feature.The company must be able to search based on information in the video, such as objects, scenery items, or people’s faces.A catalog is available that contains faces of people who have appeared in the videos that include an image of each person.The company would like to migrate these videos to AWS.The company has a high-speed AWS Direct Connect connection with AWS and would like to move the MAM solution video content directly from its current file system.How can these requirements be met by using the LEAST amount of ongoing management overhead and causing MINIMAL disruption to the existing system?Read More →

Your company policies require encryption of sensitive data at rest.You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance.Which of these options would allow you to encrypt your data at rest? (Choose three.)Read More →

A company runs an ecommerce web application on AWS. The web application is hosted as a static website on Amazon S3 with Amazon CloudFront for content delivery. An Amazon APIGateway API invokes AWS Lambda functions to handle user requests and order processing for the web application The Lambda functions store data in an Amazon ROS for MySQL DB cluster that uses On-Demand instances. The DB cluster usage has been consistent in the past 12 months.Recently, the website has experienced SQL injection and web exploit attempts. Customers also report that order processing time has increased during periods of peak usage. During these periods, the Lambda functions often have cold starts. As the company grows, the company needs to ensure scalability and low-latency access during traffic peaks. The company also must optimize the database costs and add protection against the SQL injection and web exploit attempts.Which solution will meet these requirements?Read More →

A customer is deploying an SSL enabled web application to AWS and would like to implement a separation of roles between the EC2 service administrators that are entitled to login to instances as well as making API calls and the security officers who will maintain and have exclusive access to the application’s X.509 certificate that contains the private key.Read More →

A company has an application that stores user-uploaded videos in an Amazon S3 bucket that uses S3 Standard storage.Users access the videos frequently in the first 180 days after the videos are uploaded.Access after 180 days is rare.Named users and anonymous users access the videos.Most of the videos are more than 100 MB in size.Users often have poor internet connectivity when they upload videos, resulting in failed uploads.The company uses multipart uploads for the videos.A solutions architect needs to optimize the S3 costs of the application.Which combination of actions will meet these requirements? (Choose two.)Read More →