Solutions Architect Professional (Page 90)

A company needs to create a centralized logging architecture for all of its AWS accounts.The architecture should provide near-real-time data analysis for all AWSCloudTrail logs and VPC Flow Logs across all AWS accounts.The company plans to use Amazon Elasticsearch Service (Amazon ES) to perform log analysis in the logging account.Which strategy a solutions architect use to meet these requirements?Read More →

A company built an application based on AWS Lambda deployed in an AWS CloudFormation stack.The last production release of the web application introduced an issue that resulted in an outage lasting several minutes.A solutions architect must adjust the deployment process to support a canary release.Which solution will meet these requirements?Read More →

A solutions architect must analyze a company’s Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to determine whether the company is using resources efficiently.The company is running several large, high-memory EC2 instances to host database clusters that are deployed in active/ passive configurations.The utilization of these EC2 instances varies by the applications that use the databases, and the company has not identified a pattern.The solutions architect must analyze the environment and take action based on the findings.Which solution meets these requirements MOST cost-effectively?Read More →

A solutions architect needs to copy data from an Amazon S3 bucket m an AWS account to a new S3 bucket in a new AWS account.The solutions architect must implement a solution that uses the AWS CLI.Which combination of steps will successfully copy the data? (Choose three.)Read More →

As a part of building large applications in the AWS Cloud, the Solutions Architect is required to implement the perimeter security protection.Applications running on AWS have the following endpoints:✑ Application Load Balancer✑ Amazon API Gateway regional endpoint✑ Elastic IP address-based EC2 instances.✑ Amazon S3 hosted websites.✑ Classic Load BalancerThe Solutions Architect must design a solution to protect all of the listed web front ends and provide the following security capabilities:✑ DDoS protection✑ SQL injection protection✑ IP address whitelist/blacklist✑ HTTP flood protection✑ Bad bot scraper protectionHow should the Solutions Architect design the solution?Read More →

An AWS customer has a web application that runs on premises.The web application fetches data from a third-party API that is behind a firewall.The third party accepts only one public CIDR block in each client’s allow list.The customer wants to migrate their web application to the AWS Cloud.The application will be hosted on a set of Amazon EC2 instances behind an Application Load Balancer (ALB) in a VPC.The ALB is located in public subnets.The EC2 instances are located in private subnets.NAT gateways provide internet access to the private subnets.How should a solutions architect ensure that the web application can continue to call the third-party API after the migration?Read More →

A company wants to migrate its website from an on-premises data center onto AWS.At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency.The company’s security policy states that privileges and network permissions must be configured according to best practice, using least privilege.A Solutions Architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster.What steps are required after the deployment to meet the requirements? (Choose two.)Read More →

A company’s factory and automation applications are running in a single VPC.More than 20 applications run on a combination of Amazon EC2, Amazon Elastic Container Service (Amazon ECS), and Amazon RDS.The company has software engineers spread across three teams.One of the three teams owns each application, and each time is responsible for the cost and performance of all of its applications.Team resources have tags that represent their application and team.The teams use IAM access for daily activities.The company needs to determine which costs on the monthly AWS bill are attributable to each application or team.The company also must be able to create reports to compare costs from the last 12 months and to help forecast costs for the next 12 months.A solutions architect must recommend an AWS Billing and Cost Management solution that provides these cost reports.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company is migrating its marketing website and content management system from an on-premises data center to AWS.The company wants the AWS application to be deployed in a VPC with Amazon EC2 instances used for the web servers and an Amazon RDS instance for the database.The company has a runbook document that describes the installation process of the on-premises system.The company would like to base the AWS system on the processes referenced in the runbook document.The runbook document describes the installation and configuration of the operating systems, network settings, the website, and content management system software on the servers.After the migration is complete, the company wants to be able to make changes quickly to take advantage of other AWS features.How can the application and environment be deployed and automated in AWS, while allowing for future changes?Read More →

A company runs a new application as a static website in Amazon S3.The company has deployed the application to a production AWS account and uses Amazon CloudFront to deliver the website.The website calls an Amazon API Gateway REST API.An AWS Lambda function backs each API method.The company wants to create a CSV report every 2 weeks to show each API Lambda function’s recommended configured memory, recommended cost, and the price difference between current configurations and the recommendations.The company will store the reports in an S3 bucket.Which solution will meet these requirements with the LEAST development time?Read More →