Solutions Architect Professional (Page 76)

In Amazon ElastiCache, the default cache port is:Read More →

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

You need to develop and run some new applications on AWS and you know that Elastic Beanstalk and CloudFormation can both help as a deployment mechanism for a broad range of AWS resources.Which of the following is TRUE statements when describing the differences between Elastic Beanstalk and CloudFormation?Read More →

A company is running an application in the AWS Cloud.Recent application metrics show inconsistent response times and a significant increase in error rates.Calls to third-party services are causing the delays.Currently, the application calls third-party services synchronously by directly invoking an AWS Lambda function.A solutions architect needs to decouple the third-party service calls and ensure that all the calls are eventually completed.Which solution will meet these requirements?Read More →

An IAM user is trying to perform an action on an object belonging to some other root account’s bucket.Which of the below mentioned options will AWS S3 not verify?Read More →

A company is running applications on AWS in a multi-account environment.The company’s sales team and marketing team use separate AWS accounts in AWS Organizations.The sales team stores petabytes of data in an Amazon S3 bucket.The marketing team uses Amazon QuickSight for data visualizations.The marketing team needs access to data that the sates team stores in the S3 bucket.The company has encrypted the S3 bucket with an AWS Key Management Service (AWS KMS) key.The marketing team has already created the IAM service role for QuickSight to provide QuickSight access in the marketing AWS account.The company needs a solution that will provide secure access to the data in the S3 bucket across AWS accounts.Which solution will meet these requirements with the LEAST operational overhead?Read More →

An organization is planning to extend their data center by connecting their DC with the AWS VPC using the VPN gateway.The organization is setting up a dynamically routed VPN connection.Which of the below mentioned answers is not required to setup this configuration?Read More →

A company is planning to migrate its business-critical applications from an on-premises data center to AWS.The company has an on-premises installation of a Microsoft SQL Server Always On cluster.The company wants to migrate to an AWS managed database service.A solutions architect must design a heterogeneous database migration on AWS.Which solution will meet these requirements?Read More →

An organization is planning to host a Wordpress blog as well a joomla CMS on a single instance launched with VPC.The organization wants to have separate domains for each application and assign them using Route 53.The organization may have about ten instances each with two applications as mentioned above.While launching the instance, the organization configured two separate network interfaces (primary + ENI) and wanted to have two elastic IPs for that instance.It was suggested to use a public IP from AWS instead of an elastic IP as the number of elastic IPs is restricted.What action will you recommend to the organization?Read More →

A publishing company’s design team updates the icons and other static assets that an ecommerce web application uses.The company serves the icons and assets from an Amazon S3 bucket that is hosted in the company’s production account.The company also uses a development account that members of the design team can access.After the design team tests the static assets in the development account, the design team needs to load the assets into the S3 bucket in the production account.A solutions architect must provide the design team with access to the production account without exposing other parts of the web application to the risk of unwanted changes.Which combination of steps will meet these requirements? (Choose three.)Read More →