Solutions Architect Professional (Page 83)

You are running a successful multitier web application on AWS and your marketing department has asked you to add a reporting tier to the application.The reporting tier will aggregate and publish status reports every 30 minutes from user-generated information that is being stored in your web application s database.You are currently running a Multi-AZ RDS MySQL instance for the database tier.You also have implemented Elasticache as a database caching layer between the application tier and database tier.Please select the answer that will allow you to successfully implement the reporting tier with as little impact as possible to your database.Read More →

A company has an on-premises monitoring solution using a PostgreSQL database for persistence of events.The database is unable to scale due to heavy ingestion and it frequently runs out of storage.The company wants to create a hybrid solution and has already set up a VPN connection between its network and AWS.The solution should include the following attributes:• Managed AWS services to minimize operational complexity.• A buffer that automatically scales to match the throughput of data and requires no ongoing administration.• A visualization tool to create dashboards to observe events in near-real time.• Support for semi-structured JSON data and dynamic schemas.Which combination of components will enable the company to create a monitoring solution that will satisfy these requirements? (Choose two.)Read More →

You are designing a data leak prevention solution for your VPC environment.You want your VPC Instances to be able to access software depots and distributions on the Internet for product updates.The depots and distributions are accessible via third party CDNs by their URLs.You want to explicitly deny any other outbound connections from your VPC instances to hosts on the internet.Which of the following options would you consider?Read More →

A company is running an application in the AWS Cloud.The application runs on containers m an Amazon Elastic Container Service (Amazon ECS) cluster.The ECS tasks use the Fargate launch type.The application’s data is relational and is stored in Amazon Aurora MySQL.To meet regulatory requirements, the application must be able to recover to a separate AWS Region in the event of an application failure.In case of a failure, no data can be lost.Which solution will meet these requirements with the LEAST amount of operational overhead?Read More →

You have an application running on an EC2 instance which will allow users to download files from a private S3 bucket using a pre-signed URL. Before generating the URL, the application should verify the existence of the file in S3.How should the application use AWS credentials to access the S3 bucket securely?Read More →

A digital marketing company has multiple AWS accounts that belong to various teams.The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company’s marketing campaigns.The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects.A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account.The solutions architect also has set up a custom AWS Key Management Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket.However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Access Denied error.The solutions architect must ensure that users in the Strategy account can access the S3 bucket.The solution must provide these users with only the minimum permissions that they need.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A 3-tier e-commerce web application is current deployed on-premises and will be migrated to AWS for greater scalability and elasticity.The web server currently shares read-only data using a network distributed file system.The app server tier uses a clustering mechanism for discovery and shared session state that depends on IP multicast.The database tier uses shared-storage clustering to provide database fall over capability, and uses several read slaves for scaling.Data on all servers and the distributed file system directory is backed up weekly to off-site tapes.Which AWS storage and database architecture meets the requirements of the application?Read More →

A company manages multiple AWS accounts by using AWS Organizations.Under the root OU, the company has two OUs: Research and DataOps.Because of regulatory requirements, all resources that the company deploys in the organization must reside in the ap-northeast-1 Region.Additionally, EC2 instances that the company deploys in the DataOps OU must use a predefined list of instance types.A solutions architect must implement a solution that applies these restrictions.The solution must maximize operational efficiency and must minimize ongoing maintenance.Which combination of steps will meet these requirements? (Choose two.)Read More →

Your company plans to host a large donation website on Amazon Web Services (AWS).You anticipate a large and undetermined amount of traffic that will create many database writes.To be certain that you do not drop any writes to a database hosted on AWS.Which service should you use?Read More →

A company has an on-premises Microsoft SQL Server database that writes a nightly 200 GB export to a local drive.The company wants to move the backups to more robust cloud storage on Amazon S3.The company has set up a 10 Gbps AWS Direct Connect connection between the on-premises data center and AWS.Which solution meets these requirements MOST cost-effectively?Read More →