Solutions Architect Professional (Page 92)

A company is building a hybrid environment that includes servers in an on-premises data center and in the AWS Cloud.The company has deployed Amazon EC2 instances in three VPCs.Each VPC is in a different AWS Region.The company has established an AWS Direct.Connect connection to the data center from the Region that is closest to the data center.The company needs the servers in the on-premises data center to have access to the EC2 instances in all three VPCs.The servers in the on-premises data center also must have access to AWS public services.Which combination of steps will meet these requirements with the LEAST cost? (Choose two.)Read More →

A United Kingdom (UK) company recently completed a successful proof of concept in Amazon WorkSpaces.The company also has a large office in the UnitedStates (US).Staff members from each office regularly travel between the two locations and need access to a corporate WorkSpace without any reconfiguration of their WorkSpaces client.The company has purchased a domain by using Amazon Route 53 for the connection alias.The company will use a Windows profile and document management solution.A solutions architect needs to design the full solution.The solution must use a configuration of WorkSpaces in two AWS Regions and must provide Regional resiliency.Which solution will meet these requirements?Read More →

A company’s compliance audit reveals that some Amazon Elastic Block Store (Amazon EBS) volumes that were created in an AWS account were not encrypted.A solutions architect must implement a solution to encrypt all new EBS volumes at rest.Which solution will meet this requirement with the LEAST effort?Read More →

A company in the United States (US) has acquired a company in Europe.Both companies use the AWS Cloud.The US company has built a new application with a microservices architecture.The US company is hosting the application across five VPCs in the us-east-2 Region.The application must be able to access resources in one VPC in the eu-west-1 Region.However, the application must not be able to access any other VPCs.The VPCs in both Regions have no overlapping CIDR ranges.All Accounts are already consolidated in one organization in AWS Organizations.Which solution will meet these requirements MOST cost-effectively?Read More →

A company needs to implement a disaster recovery (DR) plan for a web application.The application runs in a single AWS Region.The application uses microservices that run in containers.The containers are hosted on AWS Fargate in Amazon Elastic Container Service (Amazon ECS).The application has an Amazon RDS for MySQL DB instance as its data layer and uses Amazon Route 53 for DNS resolution.An Amazon CloudWatch alarm invokes an Amazon EventBridge rule if the application experiences a failure.A solutions architect must design a DR solution to provide application recovery to a separate Region.The solution must minimize the time that is necessary to recover from a failure.Which solution will meet these requirements?Read More →

A company is migrating its development and production workloads to a new organization in AWS Organizations.The company has created a separate member account for development and a separate member account for production.Consolidated billing is inked to the management account.In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts.Which solution will meet this requirement?Read More →

A company needs to establish a connection from its on-premises data center to AWS.The company needs to connect all of its VPCs that are located in different AWS Regions with transitive routing capabilities between VPC networks.The company also must reduce network outbound traffic costs, increase bandwidth throughput, and provide a consistent network experience for end users.Which solution will meet these requirements?Read More →

A company is building dozens of new workloads by using a variety of AWS services.Each workload will belong to a separate business unit.The company needs to minimize costs as each business unit experiments with ways to innovate.The company also needs to maximize scalability for its security team so that the security team can identify and respond to threats as quickly as possible for all the workloads.Which combination of actions should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company runs applications in hundreds of production AWS accounts.The company uses AWS Organizations with all features enabled and has a centralized backup operation that uses AWS Backup.The company is concerned about ransomware attacks.To address this concern, the company has created a new policy that all backups must be resilient to breaches of privileged-user credentials in any production account.Which combination of steps will meet this new requirement? (Choose three.)Read More →

A company is collecting a large amount of data from a fleet of IoT devices.Data is stored as Optimized Row Columnar (ORC) files in the Hadoop Distributed FileSystem (HDFS) on a persistent Amazon EMR cluster.The company’s data analytics team queries the data by using SQL in Apache Presto deployed on the sameEMR cluster.Queries scan large amounts of data, always run for less than 15 minutes, and run only between 5 PM and 10 PM.The company is concerned about the high cost associated with the current solution.A solutions architect must propose the most cost-effective solution that will allow SQL data queries.Which solution will meet these requirements?Read More →