A company has a static website that is hosted on Amazon CloudFront in front of Amazon S3. The static website uses a database backend. The company notices that the website does not reflect updates that have been made in the website’s Git repository. The company checks the continuous integration and continuous delivery (CI/CD) pipeline between the Git repository and Amazon S3. The company verifies that the webhooks are configured properly and that the CI/CD pipeline is sending messages that indicate successful deployments.A solutions architect needs to implement a solution that displays the updates on the website.Which solution will meet these requirements?
Answer(s): C
The correct answer is C. Invalidate the CloudFront cache to ensure updated S3 content is served to end users, forcing CloudFront to fetch the latest objects from S3 after deployment.A) Adding an Application Load Balancer does not address caching or content updates for a static site served from S3 via CloudFront. B) ElastiCache in the database tier does not affect static asset delivery or CloudFront caching behavior. D) ACM only manages SSL/TLS certificates; it has no role in propagating updated static content through CloudFront.
A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has three tiers: an application tier, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specific features of SQL Server such as native backups and Data Quality Services. The company also needs to share files for processing between the tiers.How should a solutions architect design the architecture to meet these requirements?
Answer(s): B
Hosting all three tiers on EC2 with FSx for Windows File Server provides native SQL Server features (backups) on the database layer and seamless Windows-compatible file sharing across tiers.A) FSx File Gateway is for on-premises to cloud access, not optimal for in-cloud Windows file sharing and native SQL Server features. C) RDS for SQL Server supports backups but file sharing across tiers via EFS is not Windows-native and RDS limits cross-tier file sharing. D) io2 EBS volumes are block storage, not suitable for shared file access across multiple instances natively and do not support SQL Server native backups as a shared file system.
A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application.What should a solutions architect do to meet these requirements?
The correct answer is C. Amazon EFS provides a managed, scalable, POSIX-compliant file system that can be mounted by multiple Linux instances concurrently, enabling shared file access without modifying the application. A) S3 is object storage, not a shared filesystem, and wouldn’t present a POSIX mount expected by the app. B) CloudFront is a CDN for caching/accelerating web content, not a shared file system. D) EBS gp3 volumes cannot be mounted on multiple instances simultaneously; EBS is block storage for a single instance, not a shared file system.
A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account.Which solution will meet these requirements in the MOST secure manner?
The correct approach uses an IAM role assumed by the Lambda function with a scoped policy granting read access to the specific S3 bucket, providing least privilege and secure credential handling.A) Insufficient: a bucket policy can grant access but does not tie to the Lambda execution role and may be broader than necessary.C) Embedding keys in code is insecure; Lambda should use roles, not hard-coded credentials.D) Grants read access to all buckets in the account; violates least privilege by broad scope.B) Correct: role-based access with a scoped bucket policy ensures secure, least-privilege access for the Lambda function.
A company hosts a web application on multiple Amazon EC2 instances. The EC2 instances are in an Auto Scaling group that scales in response to user demand. The company wants to optimize cost savings without making a long-term commitment.Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements?
A) On-Demand Instances and Spot Instances provide the best balance of flexibility and cost savings for variable workloads without long-term commitments.B) On-Demand alone does not maximize savings when demand fluctuates; costs are higher than using Spot when capacity is available.C) Correct: mix of On-Demand and Spot allows scaling with demand, using cheaper Spot capacity for variable, interruptible workloads, while On-Demand preserves baseline availability in an Auto Scaling group.D) Reserved Instances require long-term commitment and are less suitable for dynamic scaling and uncertain traffic; they’re not optimal for a non-committed, fluctuating workload.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.