A company has a three-tier application for image sharing. The application uses an Amazon EC2 instance for the front-end layer, another EC2 instance for the application layer, and a third EC2 instance for a MySQL database. A solutions architect must design a scalable and highly available solution that requires the least amount of change to the application.Which solution meets these requirements?
Answer(s): D
Elastic Load Balanced, Multi-AZ RDS provides high availability and automated failover with minimal changes to the app, while S3 serves images cost-effectively. Option D uses Elastic Beanstalk for both front-end and app layers with multi-AZ RDS for the database and S3 for image storage, meeting scalability, HA, and minimal application changes.A) Replacing app logic with Lambda and DynamoDB requires substantial architectural changes and may not align with existing three-tier design, plus moving images to S3 is fine but the Lambda/DynamoDB model isn’t least-change.B) RDS with read replicas aids read scaling but lacks Multi-AZ for failover in the given context and introducing Beanstalk is more invasive than needed.C) Moving to a memory-optimized DB instance and EC2 fleet adds complexity and does not guarantee HA or minimal changes.
An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both VPCs are in separate AWS accounts. The network administrator needs to design a solution to configure secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns.Which solution will meet these requirements?
Answer(s): A
A) Correct: VPC peering provides private, secure, and scalable connectivity between VPCs in different accounts with no single point of failure and full IP routing between networks. It avoids data traversal over the public internet and supports bidirectional traffic as long as CIDR ranges don’t overlap.B) VPC gateway endpoints are for private access to AWS services from a VPC, not for peering or cross-VPC EC2 reachability.C) Virtual private gateway and VPN-like routing are for connecting from on-prem or VPN connections to a VPC, not for direct VPC-to-VPC cross-account EC2 access.D) Private virtual interfaces are for Direct Connect to a VPC; this is overkill and not needed for standard cross-VPC EC2 access with high availability.
A company wants to experiment with individual AWS accounts for its engineer team. The company wants to be notified as soon as the Amazon EC2 instance usage for a given month exceeds a specific threshold for each account.What should a solutions architect do to meet this requirement MOST cost-effectively?
Answer(s): C
AWS Budgets provides per-account cost control with monthly periods and alert thresholds, and can notify via SNS when the threshold is exceeded, delivering the most cost-effective, per-account alerting. A) Cost Explorer reports are for analysis, not real-time budget alerts, and sending SES is not standard; B) Monthly Cost Explorer with SES is not a direct alert mechanism per se and less actionable for budgets; D) Cost and Usage Reports with Athena and EventBridge adds complexity and cost for hourly data, not necessary for simple thresholds. C) AWS Budgets with SNS alarm exactly meets per-account, monthly threshold alerting in a cost-effective way.
A solutions architect needs to design a new microservice for a company’s application. Clients must be able to call an HTTPS endpoint to reach the microservice. The microservice also must use AWS Identity and Access Management (IAM) to authenticate calls. The solutions architect will write the logic for this microservice by using a single AWS Lambda function that is written in Go 1.x.Which solution will deploy the function in the MOST operationally efficient way?
A) The combination of API Gateway REST API with IAM authentication is the most operationally efficient for a Go Lambda backend exposed via HTTPS. API Gateway handles HTTP(S) endpoints, throttling, monitoring, and easy IAM-based auth for clients invoking Lambda. B) Lambda Function URLs with AWS_IAM exists but is less feature-rich than API Gateway for access control, monitoring, and granular permissions. C) CloudFront with Lambda@Edge adds complexity and is intended for edge logic, not simple IAM auth for a direct Lambda-backed API. D) CloudFront Functions do not support Lambda backends and cannot use AWS_IAM as an authentication mechanism; misaligned architecture.
A company previously migrated its data warehouse solution to AWS. The company also has an AWS Direct Connect connection. Corporate office users query the data warehouse using a visualization tool. The average size of a query returned by the data warehouse is 50 MB and each webpage sent by the visualization tool is approximately 500 KB. Result sets returned by the data warehouse are not cached.Which solution provides the LOWEST data transfer egress cost for the company?
Hosting the visualization tool in the same AWS Region as the data warehouse and accessing it over Direct Connect minimizes egress charges by keeping traffic within AWS networking and using a private, lower-cost colocation path. D leverages data transfer between AWS Regions and Direct Connect with lower egress fees than internet transit, and staying in-region avoids cross-region charges.A) Internet egress from on-prem to AWS incurs higher data transfer costs and no Direct Connect advantage.B) Public internet egress from within AWS to an internet-facing tool incurs higher egress than a private Direct Connect path and may cross regions.C) On-premises tool with Direct Connect in-region still routes traffic from on-prem to AWS, but the tool is outside AWS. In-region, same-region pairing and Direct Connect for in-region traffic (D) is cheaper.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.