Solutions Architect Professional (Page 79)

A company is using multiple AWS accounts.The company has a shared service account and several other accounts for different projects.A team has a VPC in a project account.The team wants to connect this VPC to a corporate network through an AWS Direct Connect gateway that exists in the shared services account.The team wants to automatically perform a virtual private gateway association with the Direct Connect gateway by using an already- tested AWS Lambda function while deploying its VPC networking stack.The Lambda function code can assume a role by using AWS Security Token Service(AWS STS).The team is using AWS CloudFormation to deploy its infrastructure.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has an IoT platform that runs in an on-premises environment.The platform consists of a server that connects to IoT devices by using the MQTT protocol.The platform collects telemetry data from the devices at least once every 5 minutes.The platform also stores device metadata in a MongoDB cluster.An application that is installed on an on-premises machine runs periodic jobs to aggregate and transform the telemetry and device metadata.The application creates reports that users view by using another web application that runs on the same on-premises machine.The periodic jobs take 120-600 seconds to run.However, the web application is always running.The company is moving the platform to AWS and must reduce the operational overhead of the stack.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A company wants to migrate its corporate data center from on premises to the AWS Cloud.The data center includes physical servers and VMs that use VMware and Hyper-V.An administrator needs to select the correct services to collect data for the initial migration discovery process.The data format should be supported by AWS Migration Hub.The company also needs the ability to generate reports from the data.Which solution meets these requirements?Read More →

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.The company has the following DNS resolution requirements:On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company is using an on-premises Active Directory service for user authentication.The company wants to use the same authentication service to sign in to the company’s AWS accounts, which are using AWS Organizations.AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company’s AWS accounts.The company’s security policy requires conditional access to the accounts based on user groups and roles.User identities must be managed in a single location.Which solution will meet these requirements?Read More →

A company is providing weather data over a REST-based API to several customers.The API is hosted by Amazon API Gateway and is integrated with different AWS Lambda functions for each API operation.The company uses Amazon Route 53 for DNS and has created a resource record of weather.example.com.The company stores data for the API in Amazon DynamoDB tables.The company needs a solution that will give the API the ability to fail over to a different AWS Region.Which solution will meet these requirements?Read More →

A company hosts a web application on AWS in the us-east-1 Region.The application servers are distributed across three Availability Zones behind an ApplicationLoad Balancer.The database is hosted in MySQL database on an Amazon EC2 instance.A solutions architect needs to design a cross-Region data recovery solution using AWS services with an RTO of less than 5 minutes and an RPO of less than 1 minute.The solutions architect is deploying application servers in us- west-2, and has configured Amazon Route 53 health checks and DNS failover to us-west-2.Which additional step should the solutions architect take?Read More →

A company uses AWS Organizations with a single OU named Production to manage multiple accounts.All accounts are members of the Production OU.Administrators use deny list SCPs in the root of the organization to manage access to restricted services.The company recently acquired a new business unit and invited the new unit’s existing AWS account to the organization.Once onboarded, the administrators of the new business unit discovered that they are not able to update existing AWS Config rules to meet the company’s policies.Which option will allow administrators to make changes and continue to enforce the current policies without introducing additional long-term maintenance?Read More →

A solutions architect is designing a network for a new cloud deployment.Each account will need autonomy to modify route tables and make changes.Centralized and controlled egress internet connectivity is also needed.The cloud footprint is expected to grow to thousands of AWS accounts.Which architecture will meet these requirements?Read More →

A company is running a two-tier web-based application in an on-premises data center.The application layer consists of a single server running a stateful application.The application connects to a PostgreSQL database running on a separate server.The application’s user base is expected to grow significantly, so the company is migrating the application and database to AWS.The solution will use Amazon Aurora PostgreSQL, Amazon EC2 Auto Scaling, and Elastic Load Balancing.Which solution will provide a consistent user experience that will allow the application and database tiers to scale?Read More →