A company runs a highly available SFTP service. The SFTP service uses two Amazon EC2 Linux instances that run with elastic IP addresses to accept traffic from trusted IP sources on the internet. The SFTP service is backed by shared storage that is attached to the instances. User accounts are created and managed as Linux users in the SFTP servers.The company wants a serverless option that provides high IOPS performance and highly configurable security. The company also wants to maintain control over user permissions.Which solution will meet these requirements?
Answer(s): B
The correct answer is B.A) Incorrect: EBS is block storage for EC2, not a serverless shared filesystem for SFTP; Transfer Family with EBS is not a valid integration and security/IOPS goals are not met in serverless form.B) Correct: EFS provides a scalable, serverless shared filesystem with high IOPS; using Transfer Family with a VPC endpoint and restricted security group achieves internet-facing control while keeping centralized, permission-managed storage and high configurability.C) Incorrect: S3 with Transfer Family is object storage, not a POSIX-compatible shared filesystem; user permissions and in-file Linux user management aren’t preserved.D) Incorrect: Uses S3 (object storage) with a private VPC endpoint in a private subnet; loses controlled internet access and POSIX user management benefits of a shared filesystem.
A company is developing a new machine learning (ML) model solution on AWS. The models are developed as independent microservices that fetch approximately 1 GB of model data from Amazon S3 at startup and load the data into memory. Users access the models through an asynchronous API. Users can send a request or a batch of requests and specify where the results should be sent.The company provides models to hundreds of users. The usage patterns for the models are irregular. Some models could be unused for days or weeks. Other models could receive batches of thousands of requests at a time.Which design should a solutions architect recommend to meet these requirements?
Answer(s): D
The correct answer is D. SQS decouples asynchronous API requests from model processing and ECS scales containerized model workers based on queue depth, which handles irregular and bursty usage and supports many users with batch processing.A is wrong because Lambda loading 1 GB of model data into memory is not feasible within Lambda limits and NLB/Lambda pattern is not suited for long-running or memory-intensive model workloads.B is wrong because reading from SQS with ECS and App Mesh adds unnecessary complexity; relying on App Mesh for auto-scaling based on queue size is not primary and may not efficiently scale instantaneous bursts.C is wrong because Lambda scaled by queue size may exceed memory/time limits for large in-memory models and does not support sustained high-throughput workloads as efficiently as ECS.
A solutions architect wants to use the following JSON text as an identity-based policy to grant specific permissions:Which IAM principals can the solutions architect attach this policy to? (Choose two.)
Answer(s): A,B
A) The policy can be attached to IAM Roles, which are common principals for identity-based policies. B) The policy can be attached to IAM Groups, allowing membership-based permission grants. C) Organizations are not principals for identity-based policies; SCPs apply at the account/OU level, not as a principal. D) ECS resources are not principals for identity-based policies; policies attach to identities, not to resources. E) EC2 resources are not principals for identity-based policies; you attach policies to identities, not to individual resources.
A company is running a custom application on Amazon EC2 On-Demand Instances. The application has frontend nodes that need to run 24 hours a day, 7 days a week and backend nodes that need to run only for a short time based on workload. The number of backend nodes varies during the day.The company needs to scale out and scale in more instances based on workload.Which solution will meet these requirements MOST cost-effectively?
A) B) C) D) lines with concise reasoning.A) Reserved Instances for frontend cost-effective for 24/7; Fargate for backend lacks scaling control and can be more expensive for short-lived workloads. B) Reserved Instances for frontend provides steady-state cost, while Spot Instances offer the lowest-cost, interruption-tolerant capacity for variable, short-lived backend workloads, matching scale-out/in needs. C) Spot for frontend is risky due to interruptions; backend as Reserved increases long-term cost for non-continuous workloads. D) Spot for frontend combined with Fargate for backend still relies on managed compute with potential interruptions and may not optimize cost for variable backend load.
A company uses high block storage capacity to runs its workloads on premises. The company's daily peak input and output transactions per second are not more than 15,000 IOPS. The company wants to migrate the workloads to Amazon EC2 and to provision disk performance independent of storage capacity.Which Amazon Elastic Block Store (Amazon EBS) volume type will meet these requirements MOST cost-effectively?
Answer(s): C
The GP3 volume type is the most cost-efficient for provisioning IOPS independently of capacity, meeting the need to separate performance from storage size and supporting up to 16,000 IOPS baseline with scalable IOPS at a low cost, which suits the 15,000 IOPS peak. GP2 uses baseline 3 IOPS/GB with bursting limited; not cost-effective for high IOPS without large capacity. io2/io1 (formerly io2 Block Express) provide high IOPS but at higher cost and are intended for more demanding workloads; not as cost-efficient as GP3 for this scenario. Therefore, GP3 best matches cost-effective independent IOPS provisioning. A) GP2 is incorrect due to IOPS scaling limits. B) io2 is incorrect due to higher cost for similar IOPS. D) io1 is incorrect due to cost and similar or higher performance, not as cost-efficient as GP3.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.