Solutions Architect Professional (Page 91)

A company is adding a new approved external vendor that only supports IPv6 connectivity.The company’s backend systems sit in the private subnet of anAmazon VPC.The company uses a NAT gateway to allow these systems to communicate with external vendors over IPv4.Company policy requires systems that communicate with external vendors to use a security group that limits access to only approved external vendors.The virtual private cloud (VPC) uses the default network ACL.The Systems Operator successfully assigns IPv6 addresses to each of the backend systems.The Systems Operator also updates the outbound security group to include the IPv6 CIDR of the external vendor (destination).The systems within the VPC are able to ping one another successfully over IPv6.However, these systems are unable to communicate with the external vendor.What changes are required to enable communication with the external vendor?Read More →

A company has an organization in AWS Organizations that has a large number of AWS accounts.One of the AWS accounts is designated as a transit account and has a transit gateway that is shared with all of the other AWS accounts.AWS Site-to-Site VPN connections are configured between all of the company’s global offices and the transit account.The company has AWS Config enabled on all of its accounts.The company’s networking team needs to centrally manage a list of internal IP address ranges that belong to the global offices.Developers will reference this list to gain access to their applications securely.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company has a new security policy.The policy requires the company to log any event that retrieves data from Amazon S3 buckets.The company must save these audit logs in a dedicated S3 bucket.The company created the audit logs S3 bucket in an AWS account that is designated for centralized logging.The S3 bucket has a bucket policy that allows write- only cross-account access.A solutions architect must ensure that all S3 object-level access is being logged for current S3 buckets and future S3 buckets.Which solution will meet these requirements?Read More →

A company is running a web application in the AWS Cloud.The application consists of dynamic content that is created on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group that is configured as a target group for an Application Load Balancer (ALB).The company is using an Amazon CloudFront distribution to distribute the application globally.The CloudFront distribution uses the ALB as an origin.The company uses Amazon Route 53 for DNS and has created an A record of www.example.com for the CloudFront distribution.A solutions architect must configure the application so that itis highly available and fault tolerant.Which solution meets these requirements?Read More →

A Solutions Architect is designing the storage layer for a data warehousing application.The data files are large, but they have statically placed metadata at the beginning of each file that describes the size and placement of the file’s index.The data files are read in by a fleet of Amazon EC2 instances that store the index size, index location, and other category information about the data file in a database.That database is used by Amazon EMR to group files together for deeper analysis.What would be the MOST cost-effective, high availability storage solution for this workflow?Read More →

A health insurance company stores personally identifiable information (PII) in an Amazon S3 bucket.The company uses server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the objects.According to a new requirement, all current and future objects in the S3 bucket must be encrypted by keys that the company’s security team manages.The S3 bucket does not have versioning enabled.Which solution will meet these requirements?Read More →

A Solutions Architect is designing a network solution for a company that has applications running in a data center in Northern Virginia.The applications in the company’s data center require predictable performance to applications running in a virtual private cloud (VPC) located in us-east-1, and a secondary VPC in us- west-2 within the same account.The company data center is collocated in an AWS Direct Connect facility that serves the us-east-1 region.The company has already ordered an AWS Direct Connect connection and a cross-connect has been established.Which solution will meet the requirements at the LOWEST cost?Read More →

A company wants to migrate its data analytics environment from on premises to AWS.The environment consists of two simple Node.js applications.One of the applications collects sensor data and loads it into a MySQL database.The other application aggregates the data into reports.When the aggregation jobs run, some of the load jobs fail to run correctly.The company must resolve the data loading issue.The company also needs the migration to occur without interruptions or changes for the company’s customers.What should a solutions architect do to meet these requirements?Read More →

A company operating a website on AWS requires high levels of scalability, availability, and performance. The company is running a Ruby on Rails application onAmazon EC2. It has a data tier on MySQL 5.6 on Amazon EC2 using 16 TB of Amazon EBS storage Amazon CloudFront is used to cache application content.The Operations team is reporting continuous and unexpected growth of EBS volumes assigned to the MySQL database. The Solutions Architect has been asked to design a highly scalable, highly available, and high-performing solution.Which solution is the MOST cost-effective at scale?Read More →

A solutions architect has developed a web application that uses an Amazon API Gateway Regional endpoint and an AWS Lambda function.The consumers of the web application are all close to the AWS Region where the application will be deployed.The Lambda function only queries an Amazon Aurora MySQL database.The solutions architect has configured the database to have three read replicas.During testing, the application does not meet performance requirements.Under high load, the application opens a large number of database connections.The solutions architect must improve the application’s performance.Which actions should the solutions architect take to meet these requirements? (Choose two.)Read More →