Solutions Architect Professional (Page 93)

A company has multiple AWS accounts.The company recently had a security audit that revealed many unencrypted Amazon Elastic Block Store (Amazon EBS) volumes attached to Amazon EC2 instances.A solutions architect must encrypt the unencrypted volumes and ensure that unencrypted volumes will be detected automatically in the future.Additionally, the company wants a solution that can centrally manage multiple AWS accounts with a focus on compliance and security.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company is subject to regulatory audits of its financial information.External auditors who use a single AWS account need access to the company’s AWS account.A solutions architect must provide the auditors with secure, read-only access to the company’s AWS account.The solution must comply with AWS security best practices.Which solution will meet these requirements?Read More →

An enterprise company’s data science team wants to provide a safe, cost-effective way to provide easy access to Amazon SageMaker.The data scientists have limited AWS knowledge and need to be able to launch a Jupyter notebook instance.The notebook instance needs to have a preconfigured AWS KMS key to encrypt data at rest on the machine learning storage volume without exposing the complex setup requirements.Which approach will allow the company to set up a self-service mechanism for the data scientists to launch Jupyter notebooks in its AWS accounts with theLEAST amount of operational overhead?Read More →

A company has Linux-based Amazon EC2 instances.Users must access the instances by using SSH with EC2 SSH key pairs.Each machine requires a unique EC2 key pair.The company wants to implement a key rotation policy that will, upon request, automatically rotate all the EC2 key pairs and keep the keys in a securely encrypted place.The company will accept less than 1 minute of downtime during key rotation.Which solution will meet these requirements?Read More →

A company is running a legacy application on Amazon EC2 instances in multiple Availability Zones behind a software load balancer that runs on an active/standby set of EC2 instances.For disaster recovery, the company has created a warm standby version of the application environment that is deployed in another AWSRegion.The domain for the application uses a hosted zone from Amazon Route 53.The company needs the application to use static IP addresses, even in the case of a failover event to the secondary Region.The company also requires the client’s source IP address to be available for auditing purposes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company uses AWS Organizations to manage its AWS accounts.The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage.The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?Read More →

A company with multiple accounts is currently using a configuration that does not meet the following security governance policies:✑ Prevent ingress from port 22 to any Amazon EC2 instance.✑ Require billing and application tags for resources.✑ Encrypt all Amazon EBS volumes.A solutions architect wants to provide preventive and detective controls, including notifications about a specific resource, if there are policy deviations.Which solution should the solutions architect implement?Read More →

A media storage application uploads user photos to Amazon S3 for processing by AWS Lambda functions.Application state is stored in Amazon DynamoDB tables.Users are reporting that some uploaded photos are not being processed properly.The application developers trace the logs and find that Lambda is experiencing photo processing issues when thousands of users upload photos simultaneously.The issues are the result of Lambda concurrency limits and the performance of DynamoDB when data is saved.Which combination of actions should a solutions architect take to increase the performance and reliability of the application? (Choose two.)Read More →

A company is running a .NET three-tier web application on AWS.The team currently uses XL storage optimized instances to store and serve the website’s image and video files on local instance storage.The company has encountered issues with data loss from replication and instance failures.The Solutions Architect has been asked to redesign this application to improve its reliability while keeping costs low.Which solution will meet these requirements?Read More →

A company runs an unauthenticated static website (www.example.com) that includes a registration form for users.The website uses Amazon S3 for hosting and uses Amazon CloudFront as the content delivery network with AWS WAF configured.When the registration form is submitted, the website calls an Amazon API Gateway API endpoint that invokes an AWS Lambda function to process the payload and forward the payload to an external API call.During testing, a solutions architect encounters a cross-origin resource sharing (CORS) error.The solutions architect confirms that the CloudFront distribution origin has the Access-Control-Allow-Origin header set to www.example.com.What should the solutions architect do to resolve the error?Read More →