Solutions Architect Professional (Page 72)

A company runs a Windows Server host in a public subnet that is configured to allow a team of administrators to connect over RDP to troubleshoot issues with hosts in a private subnet.The host must be available at all times outside of a scheduled maintenance window, and needs to receive the latest operating system updates within 3 days of release.What should be done to manage the host with the LEAST amount of administrative effort?Read More →

A company has an application that uses AWS Key Management Service (AWS KMS) to encrypt and decrypt data.The application stores data in an Amazon S3 bucket in an AWS Region.Company security policies require the data to be encrypted before the data is placed into the S3 bucket.The application must decrypt the data when the application reads files from the S3 bucket.The company replicates the S3 bucket to other Regions.A solutions architect must design a solution so that the application can encrypt and decrypt data across Regions.The application must use the same key to decrypt the data in each Region.Which solution will meet these requirements?Read More →

A company is running a large application on premises.Its technology stack consists of Microsoft .NET for the web server platform and Apache Cassandra for the database.The company wants to migrate this application to AWS to improve service reliability.The IT team also wants to reduce the time it spends on capacity management and maintenance of this infrastructure.The Development team is willing and available to make code changes to support the migration.Which design is the LEAST complex to manage after the migration?Read More →

A global ecommerce company has many data centers around the world.With the growth of its stored data, the company needs to set up a solution to provide scalable storage for legacy on-premises file applications.The company must be able to take point-in-time copies of volumes by using AWS Backup and must retain low-latency access to frequently accessed data.The company also needs to have storage volumes that can be mounted as Internet Small Computer System Interface (iSCSI) devices from the company’s on-premises application servers.Which solution will meet these requirements?Read More →

A company has 50 AWS accounts that are members of an organization in AWS Organizations.Each account contains multiple VPCs.The company wants to useAWS Transit Gateway to establish connectivity between the VPCs in each member account.Each time a new member account is created, the company wants to automate the process of creating a new VPC and a transit gateway attachment.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is using AWS CloudFormation as its deployment tool for all applications.It stages all application binaries and templates within Amazon S3 buckets with versioning enabled.Developers have access to an Amazon EC2 instance that hosts the integrated development environment (IDE).The developers download the application binaries from Amazon S3 to the EC2 instance, make changes, and upload the binaries to an S3 bucket after running the unit tests locally.The developers want to improve the existing deployment mechanism and implement CI/CD using AWS CodePipeline.The developers have the following requirements:• Use AWS CodeCommit for source control.• Automate unit testing and security scanning.• Alert the developers when unit tests fail.• Turn application features on and off, and customize deployment dynamically as part of CI/CD.• Have the lead developer provide approval before deploying an application.Which solution will meet these requirements?Read More →

A company has an application.Once a month, the application creates a compressed file that contains every object within an Amazon S3 bucket.The total size of the objects before compression is 1 TB.The application runs by using a scheduled cron job on an Amazon EC2 instance that has a 5 TB Amazon Elastic Block Store (Amazon EBS) volume attached.The application downloads all the files from the source S3 bucket to the EBS volume, compresses the file, and uploads the file to a target S3 bucket.Every invocation of the application takes 2 hours from start to finish.Which combination of actions should a solutions architect take to OPTIMIZE costs for this application? (Choose two.)Read More →

A company’s CISO has asked a solutions architect to re-engineer the company’s current CI/CD practices to make sure patch deployments to its application can happen as quickly as possible with minimal downtime if vulnerabilities are discovered.The company must also be able to quickly roll back a change in case of errors.The web application is deployed in a fleet of Amazon EC2 instances behind an Application Load Balancer.The company is currently using GitHub to host the application source code, and has configured an AWS CodeBuild project to build the application.The company also intends to use AWS CodePipeline to trigger builds from GitHub commits using the existing CodeBuild project.What CI/CD configuration meets all of the requirements?Read More →

A company wants to run a serverless application on AWS.The company plans to provision its application in Docker containers running in an Amazon ECS cluster.The application requires a MySQL database and the company plans to use Amazon RDS.The company has documents that need to be accessed frequently for the first 3 months, and rarely after that.The document must be retained for 7 years.What is the MOST cost-effective solution to meet these requirements?Read More →

A company is migrating its development and production workloads to a new organization in AWS Organizations.The company has created a separate member account for development and a separate member account for production.Consolidated billing is linked to the management account.In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts.Which solution will meet this requirement?Read More →