Solutions Architect Professional (Page 83)

An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2 Instances.The customers security policy requires that every outbound connection from these instances to any other service within the customers Virtual Private Cloud must be authenticated using a unique x 509 certificate that contains the specific instance-id.In addition, an x 509 certificates must Designed by the customer’s Key management service in order to be trusted for authentication.Which of the following configurations will support these requirements?Read More →

A startup company recently migrated a large ecommerce website to AWS.The website has experienced a 70% increase in sales.Software engineers are using a private GitHub repository to manage code.The DevOps team is using Jenkins for builds and unit testing.The engineers need to receive notifications for bad builds and zero downtime during deployments.The engineers also need to ensure any changes to production are seamless for users and can be rolled back in the event of a major issue.The software engineers have decided to use AWS CodePipeline to manage their build and deployment process.Which solution will meet these requirements?Read More →

Your department creates regular analytics reports from your company’s log files All log data is collected in Amazon S3 and processed by daily Amazon ElasticMapReduce (EMR) jobs that generate daily PDF reports and aggregated tables in CSV format for an Amazon Redshift data warehouse.Your CFO requests that you optimize the cost structure for this system.Which of the following alternatives will lower costs without compromising average performance of the system or data integrity for the raw data?Read More →

A software as a service (SaaS) company has developed a multi-tenant environment.The company uses Amazon DynamoDB tables that the tenants share for the storage layer.The company uses AWS Lambda functions for the application services.The company wants to offer a tiered subscription model that is based on resource consumption by each tenant.Each tenant is identified by a unique tenant ID that is sent as part of each request to the Lambda functions.The company has created an AWS Cost and Usage Report (AWS CUR) in an AWS account.The company wants to allocate the DynamoDB costs to each tenant to match that tenant’s resource consumption.Which solution will provide a granular view of the DynamoDB cost for each tenant with the LEAST operational effort?Read More →

To serve Web traffic for a popular product your chief financial officer and IT director have purchased 10 m1.large heavy utilization Reserved Instances (RIs), evenly spread across two availability zones; Route 53 is used to deliver the traffic to an Elastic Load Balancer (ELB).After several months, the product grows even more popular and you need additional capacity.As a result, your company purchases two C3.2xlarge medium utilization Ris.You register the two c3.2xlarge instances with your ELB and quickly find that the m1.large instances are at 100% of capacity and the c3.2xlarge instances have significant capacity that’s unused.Which option is the most cost effective and uses EC2 capacity most effectively?Read More →

A company needs to improve the security of its web-based application on AWS.The application uses Amazon CloudFront with two custom origins.The first custom origin routes requests to an Amazon API Gateway HTTP API.The second custom origin routes traffic to an Application Load Balancer (ALB).The application integrates with an OpenID Connect (OIDC) identity provider (IdP) for user management.A security audit shows that a JSON Web Token (JWT) authorizer provides access to the API.The security audit also shows that the ALB accepts requests from unauthenticated users.A solutions architect must design a solution to ensure that all backend services respond to only authenticated users.Which solution will meet this requirement?Read More →

You are looking to migrate your Development (Dev) and Test environments to AWS.You have decided to use separate AWS accounts to host each environment.You plan to link each accounts bill to a Master AWS account using Consolidated Billing.To make sure you keep within budget you would like to implement a way for administrators in the Master account to have access to stop, delete and/or terminate resources in both the Dev and Test accounts.Identify which option will allow you to achieve this goal.Read More →

A company has a web application that uses Amazon API Gateway.AWS Lambda, and Amazon DynamoDB.A recent marketing campaign has increased demand.Monitoring software reports that many requests have significantly longer response times than before the marketing campaign.A solutions architect enabled Amazon CloudWatch Logs for API Gateway and noticed that errors are occurring on 20% of the requests.In CloudWatch, the Lambda function Throttles metric represents 1% of the requests and the Errors metric represents 10% of the requests.Application logs indicate that, when errors occur, there is a call to DynamoDB.What change should the solutions architect make to improve the current response times as the web application becomes more popular?Read More →

A company has a complex web application that leverages Amazon CloudFront for global scalability and performance.Over time, users report that the web application is slowing down.The company’s operations team reports that the CloudFront cache hit ratio has been dropping steadily.The cache metrics report indicates that query strings on some URLs are inconsistently ordered and are specified sometimes in mixed-case letters and sometimes in lowercase letters.Which set of actions should the solutions architect take to increase the cache hit ratio as quickly possible?Read More →

A company has developed a new release of a popular video game and wants to make it available for public download.The new release package is approximately 5 GB in size.The company provides downloads for existing releases from a Linux-based, publicly facing FTP site hosted in an on-premises data center.The company expects the new release will be downloaded by users worldwide.The company wants a solution that provides improved download performance and low transfer costs, regardless of a user’s location.Read More →