A company is using AWS to design a web application that will process insurance quotes. Users will request quotes from the application. Quotes must be separated by quote type, must be responded to within 24 hours, and must not get lost. The solution must maximize operational efficiency and must minimize maintenance.Which solution meets these requirements?
Answer(s): C
C) Using a single SNS topic with per-quote-type SQS queues via message filtering ensures reliable, decoupled processing with strong delivery guarantees (SQS queues at-least-once, decoupled consumers, scalable via fan-out). Filters route only relevant messages to each queue, and each backend server processes its own queue, minimizing maintenance and maximizing operational efficiency.A) Kinesis streams and KCL adds complexity and per-type streams; not as cost-efficient for simple request/queue processing and maintenance growth.B) SNS with Lambda per type introduces function-per-type scaling, potential cold starts, and stricter execution limits; not as resilient as queue-based decoupling.D) OpenSearch-based delivery is unnecessary for processing quotes and adds unnecessary search infrastructure and maintenance.
A company has an application that runs on several Amazon EC2 instances. Each EC2 instance has multiple Amazon Elastic Block Store (Amazon EBS) data volumes attached to it. The application’s EC2 instance configuration and data need to be backed up nightly. The application also needs to be recoverable in a different AWS Region.Which solution will meet these requirements in the MOST operationally efficient way?
Answer(s): B
AWS Backup provides centralized, automated nightly backups of EC2 (via EBS volumes) and can copy backups to another region, satisfying both instance configuration/data backup and cross-region recoverability with minimal operational overhead. It supports tagging and resource-based backup plans, simplifying management across multiple volumes and instances.A) Lambda-based nightly EBS snapshots require custom orchestration and don’t inherently manage cross-region backup or multi-resource scope as cleanly.C) Similar to B but specifies only EBS volumes; misses potential recovery of instance config and requires more manual mapping for full restoration.D) Copying to another Availability Zone does not offer cross-region recovery, which is required.
A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company’s content on their mobile devices.What should a solutions architect recommend to meet these requirements?
A short summary: Using Amazon CloudFront with signed URLs best meets scalable, authorized mobile content delivery.A) Not correct: Public S3 content lacks access control; signed URLs via CloudFront are standard for authorized access.B) Not correct: IPsec VPN between mobile app and AWS is unnecessary for streaming scale and adds overhead; not ideal for wide-end-user access.C) Correct: CloudFront edge caching with signed URLs authenticates requests and enables scalable, low-latency delivery to millions of devices.D) Not correct: AWS Client VPN is for private access to VPC from devices, not optimized for large-scale content streaming delivery.
A company has an on-premises MySQL database used by the global sales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future.Which service should a solutions architect recommend?
Aurora Serverless for MySQL (B) provides a scalable, on-demand capacity model with minimal downtime and automatic scaling, which fits infrequent access and future user growth without choosing a fixed instance type.A) Amazon Aurora MySQL is a managed continuous provisioned cluster; it would require selecting instance types and may incur more downtime during scaling rather than serverless automation.C) Amazon Redshift Spectrum is for querying data lakes with Redshift, not a relational OLTP database migration target.D) Amazon RDS for MySQL requires fixed provisioned instances and manual scaling, not the serverless, on-demand capability.
A company experienced a breach that affected several applications in its on-premises data center. The attacker took advantage of vulnerabilities in the custom applications that were running on the servers. The company is now migrating its applications to run on Amazon EC2 instances. The company wants to implement a solution that actively scans for vulnerabilities on the EC2 instances and sends a report that details the findings.Which solution will meet these requirements?
Answer(s): D
Amazon Inspector is the dedicated service for automated security assessments of EC2 instances, with agents installed on the instances and findings reported to AWS, which can be automated into reports via Lambda. This matches the requirement to actively scan EC2 instances and generate detailed findings reports.A) AWS Shield protects against DDoS, not vulnerability scans; it does not perform host-level vulnerability assessment or reporting.B) Amazon Macie is for data discovery and classification, not vulnerability scanning; it does not scan EC2 hosts or produce vulnerability reports.C) GuardDuty analyzes for threats but does not perform active vulnerability scanning of EC2 hosts; reporting via Lambda is not its primary workflow.D) Correct: Inspector agents perform ongoing vulnerability assessments; Lambda can automate reporting.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.