A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases.Which solution meets these requirements?
Answer(s): A
Multi-AZ deployment provides synchronous replication to a standby in a different AZ, ensuring near-zero RPO in case of failure, meeting <1 second requirement.A) Correct. Multi-AZ for RDS PostgreSQL achieves synchronous replication to a standby AZ, enabling immediate failover with minimal RPO.B) Auto scaling for a single AZ DB is not a real feature for RDS; scaling does not address RPO and fails to provide a standby in another AZ for high availability.C) Standby in another AZ via read replicas introduces eventual consistency; replicas are asynchronous and do not fulfill <1 second RPO on failover.D) DMS CDC tasks are for migration/continuous replication to other targets, not for RDS high availability or automated failover within the same DB instance.
A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VPC. An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances. The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances.Which solution will meet these requirements?
Answer(s): B
The correct answer is B.- B) By restricting the EC2 instances' security group to only allow inbound traffic from the ALB’s security group, you ensure that only ALB-originated traffic can reach the instances, effectively isolating them from all other sources inside and outside the VPC.- A) Incorrect: Routes to private IPs from the internet would expose EC2 instances; no direct internet access is needed or desired in a private subnet.- C) Incorrect: Moving to public subnets and assigning Elastic IPs exposes instances to the internet and undermines private-subnet security.- D) Incorrect: Allowing all TCP traffic from the ALB’s security group is unnecessarily permissive; it should be restricted to the necessary ports (e.g., 80/443) and validated by the instance’s own SG.
A research company runs experiments that are powered by a simulation application and a visualization application. The simulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system.The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage. The company needs to migrate the applications to AWS without making code changes to either application.Which solution will meet these requirements?
Answer(s): D
The correct answer is D. FSx for NetApp ONTAP provides a scalable, fully managed SMB file system suitable for Windows applications and can be mounted by Windows EC2 instances, enabling seamless data sharing with the Linux-based simulation via NFS-compatible workflows through NFS/SMB cross-compatibility as needed, without code changes.A is incorrect because Lambda cannot host persistent SMB/NFS workloads or long-running simulations; data exchange via S3 would require application changes or additional glue, not preserving existing file-sharing behavior.B is incorrect because FSx File Gateway is for backing on-premises or hybrid file shares, not native cross-OS SMB/NFS access between EC2 Linux and Windows without code changes.C is incorrect because SQS is a messaging service, not a shared file system, so data exchange would require redesign of the data store and is not transparent to both apps.
As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information.Which solution meets these requirements?
A concise, accurate explanation:B) Create a report in Cost Explorer and download the report. Cost Explorer provides itemized or grouped cost and usage data by linked account or user, suitable for department budgeting, and supports downloadable reports. It is designed for cost visibility and report generation.A) Athena requires data export and schema setup; not the most efficient for per-user itemized reports. C) Billing dashboard access is limited in scope and not designed for automated, exportable per-user reports. D) AWS Budgets alerts do not generate itemized reports by user and are for thresholds, not reporting.
A company hosts its static website by using Amazon S3. The company wants to add a contact form to its webpage. The contact form will have dynamic server-side components for users to input their name, email address, phone number, and user message. The company anticipates that there will be fewer than 100 site visits each month.Which solution will meet these requirements MOST cost-effectively?
A) The dynamic form would require managing containers and SES integration; ECS adds unnecessary orchestration for low traffic.B) Correct: API Gateway with a Lambda backend is serverless, cost-effective for under 100 visits/month, and can securely invoke SES to send emails without provisioning servers.C) Lightsail with client-side form still not ideal for dynamic server-side processing; WorkMail is for hosted mailboxes, not email-sending from forms, and this adds unnecessary complexity.D) EC2 with LAMP is overprovisioned for light traffic, incurs server management overhead, and WorkMail integration is not suited for form-to-email workflows.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.