Solutions Architect Professional (Page 98)

A company used AWS CloudFormation to create all new infrastructure in its AWS member accounts.The resources rarely change and are properly sized for the expected load.The monthly AWS bill is consistent.Occasionally, a developer creates a new resource for testing and forgets to remove the resource when the test is complete.Most of these tests last a few days before the resources are no longer needed.The company wants to automate the process of finding unused resources.A solutions architect needs to design a solution that determines whether the cost in the AWS bill is increasing.The solution must help identify resources that cause an increase in cost and must automatically notify the company’s operations team.Which solution will meet these requirements?Read More →

A company wants to provide desktop as a service (DaaS) to a number of employees using Amazon WorkSpaces.WorkSpaces will need to access files and services hosted on premises with authorization based on the company’s Active Directory.Network connectivity will be provided through an existing AWS DirectConnect connection.The solution has the following requirements:✑ Credentials from Active Directory should be used to access on-premises files and services.✑ Credentials from Active Directory should not be stored outside the company.✑ End users should have single sign-on (SSO) to on-premises files and services once connected to WorkSpaces.Which strategy should the solutions architect use for end user authentication?Read More →

A company has an on-premises data center and is using Kubernetes to develop a new solution on AWS.The company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters for its development and test environments.The EKS control plane and data plane for production workloads must reside on premises.The company needs an AWS managed solution for Kubernetes management.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is configuring connectivity to a multi-account AWS environment to support application workloads that serve users in a single geographic region.The workloads depend on a highly available, on-premises legacy system deployed across two locations.It is critical for the AWS workloads to maintain connectivity to the legacy system, and a minimum of 5 Gbps of bandwidth is required.All application workloads within AWS must have connectivity with one another.Which solution will meet these requirements?Read More →

A flood monitoring agency has deployed more than 10,000 water-level monitoring sensors.Sensors send continuous data updates, and each update is less than 1 MB in size.The agency has a fleet of on-premises application servers.These servers receive updates from the sensors, convert the raw data into a human readable format, and write the results to an on-premises relational database server.Data analysts then use simple SQL queries to monitor the data.The agency wants to increase overall application availability and reduce the effort that is required to perform maintenance tasks.These maintenance tasks, which include updates and patches to the application servers, cause downtime.While an application server is down, data is lost from sensors because the remaining servers cannot handle the entire workload.The agency wants a solution that optimizes operational overhead and costs.A solutions architect recommends the use of AWS IoT Core to collect the sensor data.What else should the solutions architect recommend to meet these requirements?Read More →

A large company runs workloads in VPCs that are deployed across hundreds of AWS accounts.Each VPC consists of public subnets and private subnets that span across multiple Availability Zones.NAT gateways are deployed in the public subnets and allow outbound connectivity to the internet from the private subnets.A solutions architect is working on a hub-and-spoke design.All private subnets in the spoke VPCs must route traffic to the internet through an egress VPC.The solutions architect already has deployed a NAT gateway in an egress VPC in a central AWS account.Which set of additional steps should the solutions architect take to meet these requirements?Read More →

A software as a service (SaaS) company provides a media software solution to customers.The solution is hosted on 50 VPCs across various AWS Regions and AWS accounts.One of the VPCs is designated as a management VPC.The compute resources in the VPCs work independently.The company has developed a new feature that requires all 50 VPCs to be able to communicate with each other.The new feature also requires one-way access from each customer’s VPC to the company’s management VPC.The management VPC hosts a compute resource that validates licenses for the media software solution.The number of VPCs that the company will use to host the solution will continue to increase as the solution grows.Which combination of steps will provide the required VPC connectivity with the LEAST operational overhead? (Choose two.)Read More →

A company wants to migrate a 30 TB Oracle data warehouse from on premises to Amazon Redshift.The company used the AWS Schema Conversion Tool (AWSSCT) to convert the schema of the existing data warehouse to an Amazon Redshift schema.The company also used a migration assessment report to identify manual tasks to complete.The company needs to migrate the data to the new Amazon Redshift cluster during an upcoming data freeze period of 2 weeks.The only network connection between the on-premises data warehouse and AWS is a 50 Mbps internet connection.Which migration strategy meets these requirements?Read More →

A company is running its solution on AWS in a manually created VPC.The company is using AWS CloudFormation to provision other parts of the infrastructure.According to a new requirement, the company must manage all infrastructure in an automatic way.What should the company do to meet this new requirement with the LEAST effort?Read More →

A large company has a business-critical application that runs in a single AWS Region.The application consists of multiple Amazon EC2 instances and an AmazonRDS Multi-AZ DB instance.The EC2 instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.A solutions architect is implementing a disaster recovery (DR) plan for the application.The solutions architect has created a pilot light application deployment in a new Region, which is referred to as the DR Region.The DR environment has an Auto Scaling group with a single EC2 instance and a read replica of the RDS DB instance.The solutions architect must automate a failover from the primary application environment to the pilot light environment in the DR Region.Which solution meets these requirements with the MOST operational efficiency?Read More →