Solutions Architect Professional (Page 9)

Which of the following is NOT true of the DynamoDB Console?Read More →

A company is migrating an application to AWS.It wants to use fully managed services as much as possible during the migration.The company needs to store large important documents within the application with the following requirements:1.The data must be highly durable and available2.The data must always be encrypted at rest and in transit3.The encryption key must be managed by the company and rotated periodicallyWhich of the following solutions should the solutions architect recommend?Read More →

In DynamoDB, which of the following allows you to set alarms when you reach a specified threshold for a metric?Read More →

A company wants to migrate to AWS.The company is running thousands of VMs in a VMware ESXi environment.The company has no configuration management database and has little knowledge about the utilization of the VMware portfolio.A solutions architect must provide the company with an accurate inventory so that the company can plan for a cost-effective migration.Which solution will meet these requirements with the LEAST operational overhead?Read More →

In regard to DynamoDB, when you create a table with a hash-and-range key.Read More →

A company has migrated a legacy application to the AWS Cloud.The application runs on three Amazon EC2 instances that are spread across three Availability Zones.One EC2 instance is in each Availability Zone.The EC2 instances are running in three private subnets of the VPC and are set up as targets for an Application Load Balancer (ALB) that is associated with three public subnets.The application needs to communicate with on-premises systems.Only traffic from IP addresses in the company’s IP address range are allowed to access the on-premises systems.The company’s security team is bringing only one IP address from its internal IP address range to the cloud.The company has added this IP address to the allow list for the company firewall.The company also has created an Elastic IP address for this IP address.A solutions architect needs to create a solution that gives the application the ability to communicate with the on-premises systems.The solution also must be able to mitigate failures automatically.Which solution will meet these requirements?Read More →

A company has developed a web application.The company is hosting the application on a group of Amazon EC2 instances behind an Application Load Balancer.The company wants to improve the security posture of the application and plans to use AWS WAF web ACLs.The solution must not adversely affect legitimate traffic to the application.How should a solutions architect configure the web ACLs to meet these requirements?Read More →

A company has millions of objects in an Amazon S3 bucket.The objects are in the S3 Standard storage class.All the S3 objects are accessed frequently.The number of users and applications that access the objects is increasing rapidly.The objects are encrypted with server-side encryption with AWS KMS keys (SSE-KMS).A solutions architect reviews the company’s monthly AWS invoice and notices that AWS KMS costs are increasing because of the high number of requests from Amazon S3.The solutions architect needs to optimize costs with minimal changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company’s security compliance requirements state that all Amazon EC2 images must be scanned for vulnerabilities and must pass a CVE assessment.A solutions architect is developing a mechanism to create security- approved AMIs that can be used by developers.Any new AMIs should go through an automated assessment process and be marked as approved before developers can use them.The approved images must be scanned every 30 days to ensure compliance.Which combination of steps should the solutions architect take to meet these requirements while following best practices? (Choose two.)Read More →

An online magazine will launch its latest edition this month.This edition will be the first to be distributed globally.The magazine’s dynamic website currently uses an Application Load Balancer in front of the web tier, a fleet of Amazon EC2 instances for web and application servers, and Amazon Aurora MySQL.Portions of the website include static content and almost all traffic is read-only.The magazine is expecting a significant spike in internet traffic when the new edition is launched.Optimal performance is a top priority for the week following the launch.Which combination of steps should a solutions architect take to reduce system response times for a global audience? (Choose two.)Read More →