Solutions Architect Professional (Page 88)

A company is serving files to its customer through an SFTP server that is accessible over the Internet.The SFTP server is running on a single Amazon EC2 instance with an Elastic IP address attached.Customers connect to the SFTP server through its Elastic IP address and use SSH for authentication.The EC2 instance also has an attached security group that allows access from all customer IP addresses.A solutions architect must implement a solution to improve availability, minimize the complexity of infrastructure management, and minimize the disruption to customers who access files.The solution must not change the way customers connect.Which solution will meet these requirements?Read More →

A company is running a data-intensive application on AWS.The application runs on a cluster of hundreds of Amazon EC2 instances.A shared file system also runs on several EC2 instances that store 200 TB of data.The application reads and modifies the data on the shared file system and generates a report.The job runs once monthly, reads a subset of the files from the shared file system, and takes about 72 hours to complete.The compute instances scale in an Auto Scaling group, but the instances that host the shared file system run continuously.The compute and storage instances are all in the same AWS Region.A solutions architect needs to reduce costs by replacing the shared file system instances.The file system must provide high performance access to the needed data for the duration of the 72-hour run.Which solution will provide the LARGEST overall cost reduction while meeting these requirements?Read More →

A company maintains a restaurant review website.The website is a single-page application where files are stored in Amazon S3 and delivered using AmazonCloudFront.The company receives several fake postings every day that are manually removed.The security team has identified that most of the fake posts are from bots with IP addresses that have a bad reputation within the same global region.The team needs to create a solution to help restrict the bots from accessing the website.Which strategy should a solutions architect use?Read More →

A software company has deployed an application that consumes a REST API by using Amazon API Gateway, AWS Lambda functions, and an Amazon DynamoDB table.The application is showing an increase in the number of errors during PUT requests.Most of the PUT calls come from a small number of clients that are authenticated with specific API keys.A solutions architect has identified that a large number of the PUT requests originate from one client.The API is noncritical, and clients can tolerate retries of unsuccessful calls.However, the errors are displayed to customers and are causing damage to the API’s reputation.What should the solutions architect recommend to improve the customer experience?Read More →

A company needs to move its on-premises resources to AWS.The current environment consists of 100 virtual machines (VMs) with a total of 40 TB of storage.Most of the VMs can be taken offline because they support functions during business hours only, however, some are mission critical, so downtime must be minimized.The administrator of the on-premises network provisioned 10 Mbps of internet bandwidth for the migration.The on-premises network throughput has reached capacity and would be costly to increase.A solutions architect must design a migration solution that can be performed within the next 3 months.Which method would fulfill these requirements?Read More →

A company is using an on-premises Active Directory service for user authentication.The company wants to use the same authentication service to sign in to the company’s AWS accounts, which are using AWS Organizations.AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company’s AWS accounts.The company’s security policy requires conditional access to the accounts based on user groups and roles.User identities must be managed in a single location.Which solution will meet these requirements?Read More →

You have setup an Auto Scaling group.The cool down period for the Auto Scaling group is 7 minutes.The first scaling activity request for the Auto Scaling group is to launch two instances.It receives the activity question at time “t”, and the first instance is launched at t+3 minutes, while the second instance is launched at t+4 minutes.How many minutes after time “t” will Auto Scaling accept another scaling activity request?Read More →

A company has a serverless application comprised of Amazon CloudFront, Amazon API Gateway, and AWS Lambda functions.The current deployment process of the application code is to create a new version number of the Lambda function and run an AWS CLI script to update.If the new function version has errors, another CLI script reverts by deploying the previous working version of the function.The company would like to decrease the time to deploy new versions of the application logic provided by the Lambda functions, and also reduce the time to detect and revert when errors are identified.How can this be accomplished?Read More →

A company wants to launch an online shopping website in multiple countries and must ensure that customers are protected against potential `man-in-the-middle` attacks.Which architecture will provide the MOST secure site access?Read More →

A company has a web application that allows users to upload short videos.The videos are stored on Amazon EBS volumes and analyzed by custom recognition software for categorization.The website contains static content that has variable traffic with peaks in certain months.The architecture consists of Amazon EC2 instances running in an Auto Scaling group for the web application and EC2 instances running in an Auto Scaling group to process an Amazon SQS queue.The company wants to re-architect the application to reduce operational overhead using AWS managed services where possible and remove dependencies on third-party software.Which solution meets these requirements?Read More →