A company's solutions architect is reviewing an AWS-hosted web application. The application refers to static assets in an Amazon S3 bucket in the us-east-1 Region. The company requires resilience across multiple AWS Regions. The company has already created an S3 bucket in a second Region.
Which solution meets these requirements with the LEAST operational overhead?
AConfigure the application to write each object to both S3 buckets. Set up an Amazon Route 53 public hosted zone with a record set by using a weighted routing policy for each S3 bucket. Configure the application to reference the objects by using the Route 53 DNS name.
BCreate an AWS Lambda function to copy objects from the S3 bucket in us-east-1 to the S3 bucket in the second Region. Invoke the Lambda function each time an object is written to the S3 bucket in us-east-1. Set up an Amazon CloudFront distribution with an origin group that contains the two S3 buckets as origins.
CConfigure replication on the S3 bucket in us-east-1 to replicate objects to the S3 bucket in the second Region. Set up an Amazon CloudFront distribution with an origin group that contains the two S3 buckets as origins.
DConfigure replication on the S3 bucket in us-east-1 to replicate objects to the S3 bucket in the second Region. If failover is required, update the application code to load S3 objects from the S3 bucket in the second Region.
0
Community Discussion
No comments yet. Be the first to start the discussion!
A company needs to run a custom network-analysis software package to inspect traffic as it enters and leaves a VPC. The company deployed the solution with AWS CloudFormation on three Amazon EC2 instances in an Auto Scaling group. All network routes are configured to direct traffic to the EC2 instances.
Whenever the analysis software ceases to work, the Auto Scaling group replaces an instance. The network routes are not updated when an instance is replaced.
Which combination of steps will resolve this problem?
Choose three
ACreate alarms based on EC2 status check metrics that will cause the Auto Scaling group to replace the failed instance.
BUpdate the CloudFormation template to install the Amazon CloudWatch agent on the EC2 instances. Configure the CloudWatch agent to send process metrics for the application.
CUpdate the CloudFormation template to install AWS Systems Manager Agent on the EC2 instances. Configure Systems Manager Agent to send process metrics for the application.
DCreate an alarm for the custom metric in Amazon CloudWatch for the failure scenarios. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic.
ECreate an AWS Lambda function that responds to the Amazon Simple Notification Service (Amazon SNS) message to take the instance out of service. Update the network routes to point to the replacement instance.
FIn the CloudFormation template, write a condition that updates the network routes when a replacement instance is launched.
0
Community Discussion
No comments yet. Be the first to start the discussion!
A company is building a centralized logging service on Amazon EC2 that will receive and analyze logs from hundreds of AWS accounts. AWS PrivateLink provides connectivity between the client services and the logging service.
In every AWS account that contains a client, an interface endpoint for the logging service has been created and is available. The EC2 instances running the logging service and the Network Load Balancer (NLB) are deployed in separate subnets. Clients cannot submit logs through the VPC endpoint.
Which combination of actions should a solutions architect take to fix this issue?
Choose two
ACheck that the NACL is attached to the logging service subnet to allow communications to and from the NLB subnets. Check that the NACL is attached to the NLB subnet to allow communications to and from the logging service subnets running on EC2 instances.
BCheck that the NACL is attached to the logging service subnets to allow communications to and from the interface endpoint subnets. Check that the NACL is attached to the interface endpoint subnet to allow communications to and from the logging service subnets running on EC2 instances.
CCheck the security group for the logging service running on the EC2 instances to ensure it allows ingress from the NLB subnets.
DCheck the security group for the logging service running on EC2 instances to ensure it allows ingress from the clients.
ECheck the security group for the NLB to ensure it allows ingress from the interface endpoint subnets.
0
Community Discussion
No comments yet. Be the first to start the discussion!
A company’s solutions architect is assessing an AWS workload that was deployed several years ago. The application tier is stateless and operates on one large Amazon EC2 instance launched from an AMI. The application stores its data in a MySQL database running on a single EC2 instance.
CPU utilization on the application-server EC2 instance frequently reaches 100%, causing the application to become unresponsive. The company installs instance patches manually, and patching has previously caused downtime. The company must make the application highly available.
Which solution meets these requirements with the LEAST development time?
AMove the application tier to AWS Lambda functions in the existing VPC. Create an Application Load Balancer to distribute traffic across the Lambda functions. Use Amazon GuardDuty to scan the Lambda functions. Migrate the database to Amazon DocumentDB (with MongoDB compatibility.
BChange the EC2 instance type to a smaller Graviton powered instance type. Use the existing AMI to create a launch template for an Auto Scaling group. Create an Application Load Balancer to distribute traffic across the instances in the Auto Scaling group. Set the Auto Scaling group to scale based on CPU utilization. Migrate the database to Amazon DynamoDB.
CMove the application tier to containers by using Docker. Run the containers on Amazon Elastic Container Service (Amazon ECS) with EC2 instances. Create an Application Load Balancer to distribute traffic across the ECS cluster. Configure the ECS cluster to scale based on CPU utilization. Migrate the database to Amazon Neptune.
DCreate a now AMI that is configured with AWS Systems Manager Agent (SSM Agent). Use the new AMI to create a launch template for an Auto Scaling group. Use smaller instances in the Auto Scaling group. Create an Application Load Balancer to distribute traffic across the instances in the Auto Scaling group. Set the Auto Scaling group to scale based on CPU utilization. Migrate the database to Amazon Aurora MySQL.
0
Community Discussion
No comments yet. Be the first to start the discussion!
A company operates an application on a fleet of Amazon EC2 instances in private subnets behind an internet-facing Application Load Balancer (ALB). The ALB serves as the origin for an Amazon CloudFront distribution. An AWS WAF web ACL containing various AWS managed rules is associated with the CloudFront distribution.
The company requires a solution that prevents internet traffic from accessing the ALB directly.
Which solution meets these requirements with the LEAST operational overhead?
ACreate a new web ACL that contains the same rules that the existing web ACL contains. Associate the new web ACL with the ALB.
BAssociate the existing web ACL with the ALB.
CAdd a security group rule to the ALB to allow traffic from the AWS managed prefix list for CloudFront only.
DAdd a security group rule to the ALB to allow only the various CloudFront IP address ranges.
0
Community Discussion
No comments yet. Be the first to start the discussion!
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
A company needs to transfer data from its on-premises systems to Amazon S3 buckets. The company created the S3 buckets in three separate accounts. It must transfer the data privately, without it traversing the internet. The company has no current dedicated connection to AWS.
Which combination of steps should a solutions architect take to satisfy these requirements?
Choose two
AEstablish a networking account in the AWS Cloud. Create a private VPC in the networking account. Set up an AWS Direct Connect connection with a private VIF between the on-premises environment and the private VPC.
BEstablish a networking account in the AWS Cloud. Create a private VPC in the networking account. Set up an AWS Direct Connect connection with a public VIF between the on-premises environment and the private VPC.
CCreate an Amazon S3 interface endpoint in the networking account.
DCreate an Amazon S3 gateway endpoint in the networking account.
EEstablish a networking account in the AWS Cloud. Create a private VPC in the networking account. Peer VPCs from the accounts that host the S3 buckets with the VPC in the network account.
An enterprise organization is building an infrastructure-services platform for its users. The organization has these requirements:
Provide least-privilege user access when launching AWS infrastructure so users cannot provision unapproved services.
Use a central account to manage infrastructure-service creation.
Enable distribution of infrastructure services to multiple accounts in AWS Organizations.
Enable enforcement of tags on all infrastructure launched by users.
Which combination of AWS service actions will satisfy these requirements?
Choose three
ADevelop infrastructure services using AWS CloudFormation templates. Add the templates to a central Amazon S3 bucket and add the IAM roles or users that require access to the S3 bucket policy.
BDevelop infrastructure services using AWS CloudFormation templates. Upload each template as an AWS Service Catalog product to portfolios created in a central AWS account. Share these portfolios with the Organizations structure created for the company.
CAllow user IAM roles to have AWSCloudFormationFullAccess and AmazonS3ReadOnlyAccess permissions. Add an Organizations SCP at the AWS account root user level to deny all services except AWS CloudFormation and Amazon S3.
DAllow user IAM roles to have ServiceCatalogEndUserAccess permissions only. Use an automation script to import the central portfolios to local AWS accounts, copy the TagOption, assign users access, and apply launch constraints.
EUse the AWS Service Catalog TagOption Library to maintain a list of tags required by the company. Apply the TagOption to AWS Service Catalog products or portfolios.
FUse the AWS CloudFormation Resource Tags property to enforce the application of tags to any CloudFormation templates that will be created for users.
A consumer-electronics company with offices in Europe and Asia stores 60 TB of software images on premises in Europe. The company wants to move the images to an Amazon S3 bucket in the ap-northeast-1 Region. New software images are created every day and must be encrypted while in transit. The company requires a solution with no custom development that automatically transfers both all existing and new software images to Amazon S3.
What should be the next step in the transfer process?
ADeploy an AWS DataSync agent and configure a task to transfer the images to the S3 bucket.
BConfigure Amazon Kinesis Data Firehose to transfer the images using S3 Transfer Acceleration.
CUse an AWS Snowball device to transfer the images with the S3 bucket as the target.
DTransfer the images over a Site-to-Site VPN connection using the S3 API with multipart upload.
A company has developed APIs that use Amazon API Gateway Regional endpoints. The APIs invoke AWS Lambda functions and use API Gateway authentication mechanisms. Following a design review, a solutions architect identifies a group of APIs that do not need public access.
The solutions architect must design a solution that makes this group of APIs accessible only from a VPC. All APIs must be invoked by an authenticated user.
Which solution meets these requirements with the LEAST amount of effort?
ACreate an internal Application Load Balancer (ALB). Create a target group. Select the Lambda function to call. Use the ALB DNS name to call the API from the VPC.
BRemove the DNS entry that is associated with the API in API Gateway. Create a hosted zone in Amazon Route 53. Create a CNAME record in the hosted zone. Update the API in API Gateway with the CNAME record. Use the CNAME record to call the API from the VPC.
CUpdate the API endpoint from Regional to private in API Gateway. Create an interface VPC endpoint in the VPCreate a resource policy, and attach it to the API. Use the VPC endpoint to call the API from the VPC.
DDeploy the Lambda functions inside the VPC Provision an EC2 instance, and install an Apache server. From the Apache server, call the Lambda functions. Use the internal CNAME record of the EC2 instance to call the API from the VPC.
A company must modernize an application and migrate it to AWS. The application stores user profile data as text in one table in an on-premises MySQL database.
Following modernization, users will use the application to upload video files of up to 4 GB. Other users must be able to download the video files through the application. The company requires a video storage solution that scales rapidly and does not affect application performance.
Which solution meets these requirements?
AMigrate the database to Amazon Aurora PostgreSQL by using AWS Database Migration Service (AWS DMS). Store the videos as base64-encoded strings in a TEXT column in the database.
BMigrate the database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS) with the AWS Schema Conversion Tool (AWS SCT). Store the videos as objects in Amazon S3. Store the S3 key in the corresponding DynamoDB item.
CMigrate the database to Amazon Keyspaces (for Apache Cassandra) by using AWS Database Migration Service (AWS DMS) with the AWS Schema Conversion Tool (AWS SCT). Store the videos as objects in Amazon S3. Store the S3 object identifier in the corresponding Amazon Keyspaces entry.
DMigrate the database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS) with the AWS Schema Conversion Tool (AWS SCT). Store the videos as base64-encoded strings in the corresponding DynamoDB item.
A company plans to migrate an on-premises data center to AWS. The company currently runs the data center on Linux-based VMware VMs. A solutions architect needs to gather information about network dependencies among the VMs. The information must be presented as a diagram that shows host IP addresses, hostnames, and network connection details.
Which solution meets these requirements?
AUse AWS Application Discovery Service. Select an AWS Migration Hub home AWS Region. Install the AWS Application Discovery Agent on the on-premises servers for data collection. Grant permissions to Application Discovery Service to use the Migration Hub network diagrams.
BUse the AWS Application Discovery Service Agentless Collector for server data collection. Export the network diagrams from the AWS Migration Hub in .png format.
CInstall the AWS Application Migration Service agent on the on-premises servers for data collection. Use AWS Migration Hub data in Workload Discovery on AWS to generate network diagrams.
DInstall the AWS Application Migration Service agent on the on-premises servers for data collection. Export data from AWS Migration Hub in .csv format into an Amazon CloudWatch dashboard to generate network diagrams.
A company operates a solution that analyzes weather data from thousands of weather stations. The weather stations transmit the data through an Amazon API Gateway REST API with an AWS Lambda function integration. The Lambda function invokes a third-party service for data preprocessing. The third-party service becomes overloaded and fails the preprocessing, resulting in data loss.
A solutions architect must increase the solution's resiliency. The solutions architect must ensure that no data is lost and that data can be processed later when failures occur.
What should the solutions architect do to satisfy these requirements?
ACreate an Amazon Simple Queue Service (Amazon SQS) queue. Configure the queue as the dead-letter queue for the API.
BCreate two Amazon Simple Queue Service (Amazon SQS) queues: a primary queue and a secondary queue. Configure the secondary queue as the dead-letter queue for the primary queue. Update the API to use a new integration to the primary queue. Configure the Lambda function as the invocation target for the primary queue.
CCreate two Amazon EventBridge event buses: a primary event bus and a secondary event bus. Update the API to use a new integration to the primary event bus. Configure an EventBridge rule to react to all events on the primary event bus. Specify the Lambda function as the target of the rule. Configure the secondary event bus as the failure destination for the Lambda function.
DCreate a custom Amazon EventBridge event bus. Configure the event bus as the failure destination for the Lambda function.
A company runs a Grafana data-visualization solution on a single Amazon EC2 instance to monitor the health of the company’s AWS workloads. The company has invested time and effort in creating dashboards that it wants to retain. The dashboards must be highly available and cannot experience downtime of more than 10 minutes. The company must minimize ongoing maintenance.
Which solution meets these requirements with the LEAST operational overhead?
AMigrate to Amazon CloudWatch dashboards. Recreate the dashboards to match the existing Grafana dashboards. Use automatic dashboards where possible.
BCreate an Amazon Managed Grafana workspace. Configure a new Amazon CloudWatch data source. Export dashboards from the existing Grafana instance. Import the dashboards into the new workspace.
CCreate an AMI that has Grafana pre-installed. Store the existing dashboards in Amazon Elastic File System (Amazon EFS). Create an Auto Scaling group that uses the new AMI. Set the Auto Scaling group's minimum, desired, and maximum number of instances to one. Create an Application Load Balancer that serves at least two Availability Zones.
DConfigure AWS Backup to back up the EC2 instance that runs Grafana once each hour. Restore the EC2 instance from the most recent snapshot in an alternate Availability Zone when required.
A company has deployed an application on AWS Elastic Beanstalk. The application uses Amazon Aurora for its database layer. An Amazon CloudFront distribution handles web requests and has the Elastic Beanstalk domain name configured as the origin server. The distribution has an alternate domain name that visitors use to access the application.
Every week, the company takes the application out of service for routine maintenance. While the application is unavailable, the company wants visitors to receive an informational message rather than a CloudFront error message.
A solutions architect creates an Amazon S3 bucket as the first step in the process.
Which combination of steps should the solutions architect take next to meet the requirements?
Choose three
AUpload static informational content to the S3 bucket.
BCreate a new CloudFront distribution. Set the S3 bucket as the origin.
CSet the S3 bucket as a second origin in the original CloudFront distribution. Configure the distribution and the S3 bucket to use an origin access identity (OAI).
DDuring the weekly maintenance, edit the default cache behavior to use the S3 origin. Revert the change when the maintenance is complete.
EDuring the weekly maintenance, create a cache behavior for the S3 origin on the new distribution. Set the path pattern to \ Set the precedence to 0. Delete the cache behavior when the maintenance is complete.
FDuring the weekly maintenance, configure Elastic Beanstalk to serve traffic from the S3 bucket.
A company operates an on-premises website application that supplies real estate information to prospective renters and buyers. The website uses a Java backend and a NoSQL MongoDB database to store subscriber data.
The company must migrate the complete application to AWS while retaining a similar architecture. The application must be deployed for high availability, and the company cannot modify the application.
Which solution meets these requirements?
AUse an Amazon Aurora DB cluster as the database for the subscriber data. Deploy Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones for the Java backend application.
BUse MongoDB on Amazon EC2 instances as the database for the subscriber data. Deploy EC2 instances in an Auto Scaling group in a single Availability Zone for the Java backend application.
CConfigure Amazon DocumentDB (with MongoDB compatibility) with appropriately sized instances in multiple Availability Zones as the database for the subscriber data. Deploy Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones for the Java backend application.
DConfigure Amazon DocumentDB (with MongoDB compatibility) in on-demand capacity mode in multiple Availability Zones as the database for the subscriber data. Deploy Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones for the Java backend application.
A solutions architect implemented a SAML 2.0 federated identity solution with the company’s on-premises identity provider (IdP) to authenticate user access to the AWS environment. When the solutions architect tests authentication through the federated identity web portal, access to the AWS environment is granted. However, when test users try to authenticate through the federated identity web portal, they cannot access the AWS environment.
Which items should the solutions architect verify to ensure that identity federation is configured correctly?
Choose three
AThe IAM user's permissions policy has allowed the use of SAML federation for that user.
BThe IAM roles created for the federated users' or federated groups' trust policy have set the SAML provider as the principal.B. Test users are not in the AWSFederatedUsers group in the company's IdP.
CThe web portal calls the AWS STS AssumeRoleWithSAML API with the ARN of the SAML provider, the ARN of the IAM role, and the SAML assertion from IdP.
DThe on-premises IdP's DNS hostname is reachable from the AWS environment VPCs.
EThe company's IdP defines SAML assertions that properly map users or groups. In the company to IAM roles with appropriate permissions.
A solutions architect at a government agency must meet strict disaster-recovery requirements. Every Amazon Elastic Block Store (Amazon EBS) snapshot must be stored in at least two additional AWS Regions. The agency must also keep operational overhead as low as possible.
Which solution satisfies these requirements?
AConfigure a policy in Amazon Data Lifecycle Manager (Amazon DLM) to run once daily to copy the EBS snapshots to the additional Regions.
BUse Amazon EventBridge to schedule an AWS Lambda function to copy the EBS snapshots to the additional Regions.
CSetup AWS Backup to create the EBS snapshots. Configure Amazon S3 Cross-Region Replication to copy the EBS snapshots to the additional Regions.
DSchedule Amazon EC2 Image Builder to run once daily to create an AMI and copy the AMI to the additional Regions.
A solutions architect is planning to deploy a new security tool in several AWS Regions that have not been used previously. The solutions architect will deploy the tool by using an AWS CloudFormation stack set. The stack set template includes an IAM role with a custom name. When the stack set is created, no stack instances are successfully created.
What should the solutions architect do to successfully deploy the stacks?
AEnable the new Regions in all relevant accounts. Specify the CAPABILITY_NAMED_IAM capability during the creation of the stack set.
BUse the Service Quotas console to request a quota increase for the number of CloudFormation stacks in each new Region in all relevant accounts. Specify the CAPABILITY_IAM capability during the creation of the stack set.
CSpecify the CAPABILITY_NAMED_IAM capability and the SELF_MANAGED permissions model during the creation of the stack set.
DSpecify an administration role ARN and the CAPABILITY_IAM capability during the creation of the stack set.
A company uses multiple AWS accounts. DNS records are kept in an Amazon Route 53 private hosted zone in Account A, while the company's applications and databases run in Account B.
A solutions architect will deploy a two-tier application into a new VPC. To simplify configuration, a db.example.com CNAME record set for the Amazon RDS endpoint was created in an Amazon Route 53 private hosted zone.
During deployment, the application did not start. Troubleshooting showed that db.example.com cannot be resolved from the Amazon EC2 instance. The solutions architect verified that the record set was correctly created in Route 53.
Which combination of steps should the solutions architect take to resolve this issue?
Choose two
ADeploy the database on a separate EC2 instance in the new VPC. Create a record set for the instance’s private IP in the private hosted zone.
BUse SSH to connect to the application tier EC2 instance. Add an RDS endpoint IP address to the /etc/resolv.conf file.
CCreate an authorization to associate the private hosted zone in Account A with the new VPC in Account B.
DCreate a private hosted zone for the example com domain in Account B. Configure Route 53 replication between AWS accounts.
EAssociate a new VPC in Account B with a hosted zone in Account A. Delete the association authorization in Account A.
A company is growing and intends to separate its resources across hundreds of AWS accounts in multiple AWS Regions. A solutions architect must recommend a solution that denies access to operations outside specifically approved Regions.
Which solution meets these requirements?
ACreate IAM roles for each account. Create IAM policies with conditional allow permissions that include only approved Regions for the accounts.
BCreate an organization in AWS Organizations. Create IAM users for each account. Attach a policy to each user to block access to Regions where an account cannot deploy infrastructure.
CLaunch an AWS Control Tower landing zone. Create OUs and attach SCPs that deny access to run services outside of the approved Regions.
DEnable AWS Security Hub in each account. Create controls to specify the Regions where an account can deploy infrastructure.
A company must optimize the cost of its AWS application. The application uses AWS Lambda functions and Amazon Elastic Container Service (Amazon ECS) containers running on AWS Fargate. It is write-heavy and stores data in an Amazon Aurora MySQL database.
The application's load is inconsistent. It has lengthy periods of no use, followed by sudden, significant rises and falls in traffic. The database runs on a memory-optimized DB instance that cannot handle the load.
A solutions architect must design a solution that can scale to accommodate the traffic changes.
Which solution meets these requirements MOST cost-effectively?
AAdd additional read replicas to the database. Purchase Instance Savings Plans and RDS Reserved Instances.
BMigrate the database to an Aurora DB cluster that has multiple writer instances. Purchase Instance Savings Plans.
CMigrate the database to an Aurora global database. Purchase Compute Savings Plans and RDS Reserved instances.
DMigrate the database to Aurora Serverless v1. Purchase Compute Savings Plans.
A company operates a content-management application on one Windows Amazon EC2 instance in a development environment. The application reads and writes static content on a 2 TB Amazon Elastic Block Store (Amazon EBS) volume attached to the instance as its root device. The company intends to deploy the application to production as a highly available, fault-tolerant solution running on at least three EC2 instances across multiple Availability Zones.
A solutions architect must design a solution that joins every instance running the application to an Active Directory domain. The solution must also use Windows ACLs to control access to file content. At every point in time, the application must maintain exactly the same content on all running instances.
Which solution meets these requirements with the LEAST management overhead?
ACreate an Amazon Elastic File System (Amazon EFS) file share. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instances. Implement a user data script to install the application, join the instance to the AD domain, and mount the EFS file share.
BCreate a new AMI from the current EC2 Instance that is running. Create an Amazon FSx for Lustre file system. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instances. Implement a user data script to join the instance to the AD domain and mount the FSx for Lustre file system.
CCreate an Amazon FSx for Windows File Server file system. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instances. Implement a user data script to install the application and mount the FSx for Windows File Server file system. Perform a seamless domain join to join the instance to the AD domain.
DCreate a new AMI from the current EC2 instance that is running. Create an Amazon Elastic File System (Amazon EFS) file system. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three Instances. Perform a seamless domain join to join the instance to the AD domain.
A solutions architect has deployed a web application serving users in two AWS Regions under a custom domain. The application uses Amazon Route 53 latency-based routing. For each Region, the solutions architect has associated weighted record sets with two web servers in separate Availability Zones.
The solutions architect performs a disaster-recovery scenario. After all web servers in one Region are stopped, Route 53 does not automatically redirect users to the other Region.
Which of the following could be root causes of this issue?
Choose two
AThe weight for the Region where the web servers were stopped is higher than the weight for the other Region.
BOne of the web servers in the secondary Region did not pass its HTTP health check.
CLatency resource record sets cannot be used in combination with weighted resource record sets.
DThe setting to evaluate target health is not turned on for the latency alias resource record set that is associated with the domain in the Region where the web servers were stopped.
EAn HTTP health check has not been set up for one or more of the weighted resource record sets associated with the stopped web servers.
A flood-monitoring agency has deployed more than 10,000 water-level monitoring sensors. The sensors transmit continuous data updates, with each update being less than 1 MB. The agency operates a fleet of on-premises application servers. These servers receive sensor updates, transform the raw data into a human-readable format, and write the results to an on-premises relational database server. Data analysts use simple SQL queries to monitor the data.
The agency wants to improve overall application availability and reduce the effort needed for maintenance activities. These activities, including application-server updates and patches, result in downtime. When an application server is unavailable, sensor data is lost because the remaining servers cannot process the full workload.
The agency needs a solution that optimizes operational overhead and costs. A solutions architect recommends using AWS IoT Core to collect the sensor data.
What else should the solutions architect recommend to satisfy these requirements?
ASend the sensor data to Amazon Kinesis Data Firehose. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to .csv format, and insert it into an Amazon Aurora MySQL DB instance. Instruct the data analysts to query the data directly from the DB instance.
BSend the sensor data to Amazon Kinesis Data Firehose. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to Apache Parquet format, and save it to an Amazon S3 bucket. Instruct the data analysts to query the data by using Amazon Athena.
CSend the sensor data to an Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) application to convert the data to .csv format and store it in an Amazon S3 bucket. Import the data into an Amazon Aurora MySQL DB instance. Instruct the data analysts to query the data directly from the DB instance.
DSend the sensor data to an Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) application to convert the data to Apache Parquet format and store it in an Amazon S3 bucket. Instruct the data analysts to query the data by using Amazon Athena.
A global media company plans a multi-Region application deployment. Amazon DynamoDB global tables will support the deployment to maintain a consistent user experience across the two continents where users are concentrated. Each deployment will use a public Application Load Balancer (ALB). The company manages its public DNS internally. The company needs to make the application available through an apex domain.
Which solution will satisfy these requirements with the LEAST effort?
AMigrate public DNS to Amazon Route 53. Create CNAME records for the apex domain to point to the ALB. Use a geolocation routing policy to route traffic based on user location.
BPlace a Network Load Balancer (NLB) in front of the ALMigrate public DNS to Amazon Route 53. Create a CNAME record for the apex domain to point to the NLB’s static IP address. Use a geolocation routing policy to route traffic based on user location.
CCreate an AWS Global Accelerator accelerator with multiple endpoint groups that target endpoints in appropriate AWS Regions. Use the accelerator’s static IP address to create a record in public DNS for the apex domain.
DCreate an Amazon API Gateway API that is backed by AWS Lambda in one of the AWS Regions. Configure a Lambda function to route traffic to application deployments by using the round robin method. Create CNAME records for the apex domain to point to the API's URL.
Community Discussion