A company hosts multiple production applications. One of the applications consists of resources from Amazon EC2, AWS Lambda, Amazon RDS, Amazon Simple Notification Service (Amazon SNS), and Amazon Simple Queue Service (Amazon SQS) across multiple AWS Regions. All company resources are tagged with a tag name of “application” and a value that corresponds to each application. A solutions architect must provide the quickest solution for identifying all of the tagged components.Which solution meets these requirements?
Answer(s): D
The AWS Resource Groups Tag Editor provides a centralized, global view of all resources tagged with a specific key/value across services and regions, enabling the fastest identification of all tagged components in one place.A) CloudTrail records API activity, not a comprehensive, cross-service tag inventory. B) Querying each service across all Regions is time-consuming and requires multiple calls; not the quickest unified view. C) CloudWatch Logs Insights analyzes log data, not a complete resource tag inventory. D) Tag Editor is designed to search resources by tags across regions and services, giving an immediate global report.
A company needs to export its database once a day to Amazon S3 for other teams to access. The exported object size varies between 2 GB and 5 GB. The S3 access pattern for the data is variable and changes rapidly. The data must be immediately available and must remain accessible for up to 3 months. The company needs the most cost-effective solution that will not increase retrieval time.Which S3 storage class should the company use to meet these requirements?
Answer(s): A
S3 Intelligent-Tiering is correct because it automatically moves objects between frequent and infrequent access tiers based on access patterns, ensuring immediate accessibility with cost optimization for unpredictable access without manual tiering.A) S3 Intelligent-Tiering: suitable for variable access patterns; automatic tiering with no retrieval latency impact.B) S3 Glacier Instant Retrieval: designed for long-term archival with retrieval latency, not ideal when immediate access is required.C) S3 Standard: more expensive for infrequently accessed data over 3 months without access pattern optimization.D) S3 Standard-IA: cheaper storage than Standard but incurs retrieval costs and requires lifecycle considerations; not ideal for highly variable, immediate access.
A company is developing a new mobile app. The company must implement proper traffic filtering to protect its Application Load Balancer (ALB) against common application-level attacks, such as cross-site scripting or SQL injection. The company has minimal infrastructure and operational staff. The company needs to reduce its share of the responsibility in managing, updating, and securing servers for its AWS environment.What should a solutions architect recommend to meet these requirements?
AWS WAF provides customizable rules to filter common web exploits (XSS, SQLi) at the edge and integrates directly with ALB, reducing operational burden by handling security updates centrally. A) correct: WAF + ALB aligns with minimal infrastructure management and shared responsibility model.B) S3 public hosting does not provide application-layer traffic filtering or protections against web exploits.C) Shield Advanced focuses on DDoS protection, not application-layer filtering for XSS/SQLi.D) Involves additional firewall appliance and traffic hops, increasing management overhead and contrary to using managed security services.
A company’s reporting system delivers hundreds of .csv files to an Amazon S3 bucket each day. The company must convert these files to Apache Parquet format and must store the files in a transformed data bucket.Which solution will meet these requirements with the LEAST development effort?
Answer(s): B
AWS Glue provides a serverless ETL solution with built-in crawlers to discover schema and metadata, and run ETL jobs to transform CSV data into Parquet with minimal development and operational overhead. It natively targets S3 inputs/outputs and scales with the data, aligning with “least development effort.”A) EMR with Spark requires writing and maintaining a Spark application and managing an EMR cluster, increasing development and operational effort.C) AWS Batch with custom Bash job needs scripting and orchestration for each run, adding complexity.D) Lambda event-driven transformation is inefficient for hundreds of files and large data volumes; limited runtime, concurrency, and perf constraints.
A company has 700 TB of backup data stored in network attached storage (NAS) in its data center. This backup data need to be accessible for infrequent regulatory requests and must be retained 7 years. The company has decided to migrate this backup data from its data center to AWS. The migration must be complete within 1 month. The company has 500 Mbps of dedicated bandwidth on its public internet connection available for data transfer.What should a solutions architect do to migrate and store the data at the LOWEST cost?
A) Correct — Snowball provides a cost-effective, offline transfer for 700 TB within a 1-month window, avoiding internet bandwidth costs and time. After transfer, lifecycle policy moves data to S3 Glacier Deep Archive for 7-year retention at the lowest storage cost.B) VPN with on-prem to S3 Glacier relies on public internet transfer; insufficient bandwidth and cost/time for 700 TB within 1 month. Glacier is inflexible for frequent access and not optimized for large initial loads.C) 500 Mbps Direct Connect adds ongoing cost and may not meet transfer window without significant time; lifecycle to Glacier Deep Archive is fine, but initial transfer cost and time are higher than Snowball.D) DataSync on-premises needs ongoing sync; 1-month window is impractical for full 700 TB, and Glacier Deep Archive after transfer is fine, but DataSync would incur higher cost and complexity for a one-time bulk move.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.