Solutions Architect Professional (Page 89)

A team collects and routes behavioral data for an entire company.The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway.Each public subnet also contains a NAT gateway.Most of the company’s applications read from and write to Amazon Kinesis Data Streams.Most of the workloads run in private subnets.A solutions architect must review the infrastructure.The solution architect needs to reduce costs and maintain the function of the applications.The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high.A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category.What should the solutions architect do to meet these requirements?Read More →

A company is building an electronic document management system in which users upload their documents.The application stack is entirely serverless and runs on AWS in the eu-central-1 Region.The system includes a web application that uses an Amazon CloudFront distribution for delivery with Amazon S3 as the origin.The web application communicates with Amazon API Gateway Regional endpoints.The API Gateway APIs call AWS Lambda functions that store metadata in an Amazon Aurora Serverless database and put the documents into an S3 bucket.The company is growing steadily and has completed a proof of concept with its largest customer.The company must improve latency outside of Europe.Which combination of actions will meet these requirements? (Choose two.)Read More →

A finance company is running its business-critical application on current-generation Linux EC2 instances.The application includes a self-managed MySQL database performing heavy I/O operations.The application is working fine to handle a moderate amount of traffic during the month.However, it slows down during the final three days of each month due to month-end reporting, even though the company is using Elastic Load Balancers and Auto Scaling within its infrastructure to meet the increased demand.Which of the following actions would allow the database to handle the month-end load with the LEAST impact on performance?Read More →

A team collects and routes behavioral data for an entire company.The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway.Each public subnet also contains a NAT gateway.Most of the company’s applications read from and write to Amazon Kinesis Data Streams.Most of the workloads run in private subnets.A solutions architect must review the infrastructure.The solution architect needs to reduce costs and maintain the function of the applications.The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high.A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category.What should the solutions architect do to meet these requirements?Read More →

A company has introduced a new policy that allows employees to work remotely from their homes if they connect by using a VPN.The company is hosting internal applications with VPCs in multiple AWS accounts.Currently, the applications are accessible from the company’s on-premises office network through an AWS Site- to-Site VPN connection.The VPC in the company’s main AWS account has peering connections established with VPCs in other AWS accounts.A solutions architect must design a scalable AWS Client VPN solution for employees to use while they work from home.What is the MOST cost-effective solution that meets these requirements?Read More →

A retail company has an on-premises data center in Europe.The company also has a multi-Region AWS presence that includes the eu-west-1 and us-east-1 Regions.The company wants to be able to route network traffic from its on-premises infrastructure into VPCs in either of those Regions.The company also needs to support traffic that is routed directly between VPCs in those Regions.No single points of failure can exist on the network.The company already has created two 1 Gbps AWS Direct Connect connections from its on-premises data center.Each connection goes into a separate Direct Connect location in Europe for high availability.These two locations are named DX-A and DX-B, respectively.Each Region has a single AWS Transit Gateway that is configured to route all inter-VPC traffic within that Region.Which solution will meet these requirements?Read More →

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company is refactoring its on-premises order-processing platform in the AWS Cloud.The platform includes a web front end that is hosted on a fleet of VMs.RabbitMQ to connect the front end to the backend, and a Kubernetes cluster to run a containerized backend system to process the orders.The company does not want to make any major changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company wants to migrate to AWS.The company wants to use a multi-account structure with centrally managed access to all accounts and applications.The company also wants to keep the traffic on a private network.Multi-factor authentication (MFA) is required at login, and specific roles are assigned to user groups.The company must create separate accounts for development.staging, production, and shared network.The production account and the shared network account must have connectivity to all accounts.The development account and the staging account must have access only to each other.Which combination of steps should a solutions architect take 10 meet these requirements? (Choose three.)Read More →