A company hosts a multi-tier web application on Amazon Linux Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The company observes that the Auto Scaling group launches more On-Demand Instances when the application's end users access high volumes of static web content. The company wants to optimize cost.What should a solutions architect do to redesign the application MOST cost-effectively?
Answer(s): C
The correct answer is C. CloudFront with an S3 bucket hosts static content at edge locations, reducing origin load and back-end EC2/ASG scaling for static assets, lowering cost and latency.A) RI are not available for ASG capacity in the same way as On-Demand; RIs require commitment and do not directly apply to autoscaling dynamics for dynamic workloads, making it less flexible for fluctuating traffic.B) Spot Instances are cost-saving but unreliable and can cause interruptions; not suitable for a production web tier that serves user traffic unless hybrid, which adds complexity.D) Lambda/API Gateway is serverless but hosting a full static site on Lambda is inefficient and typically not cost-effective for high static content; CloudFront + S3 is standard for static assets.
A company stores several petabytes of data across multiple AWS accounts. The company uses AWS Lake Formation to manage its data lake. The company's data science team wants to securely share selective data from its accounts with the company's engineering team for analytical purposes.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): D
Lake Formation tag-based access control (TBAC) supports cross-account authorization for specific data assets, enabling selective sharing with minimal ongoing management and consistent governance across accounts.A) Incorrect: Creating a common account and IAM role adds cross-account trust stitching and ongoing maintenance; TBAC is more scalable for granular data across accounts.B) Incorrect: Granting permissions in each account increases operational overhead and lacks centralized policy enforcement.C) Incorrect: Data Exchange is for cataloged data sharing but introduces additional data publication steps and is not optimized for governed Lake Formation access at scale.D) Correct: TBAC centrally defines and enforces cross-account access on Lake Formation resources with least overhead.
A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and download latency and maximize performance.What should a solutions architect do to accomplish this?
Answer(s): A
The correct option is A) Use Amazon S3 with Transfer Acceleration to host the application. Transfer Acceleration uses CloudFront edge locations to optimize long-distance uploads and downloads to S3, reducing latency for global users and handling large gigabyte-scale data efficiently and cost-effectively.B) CacheControl headers optimize client-side caching but don’t reduce cross-region upload/download latency or provide acceleration for large, globally distributed users.C) EC2 with Auto Scaling and CloudFront adds CDN but requires managing servers; S3 with Transfer Acceleration already provides scalable, cost-effective object storage with global performance.D) ElastiCache is an in-memory cache for EC2 instances, not suitable for hosting a scalable web app with large file transfers.
A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone.An employee recently deleted the DB instance, and the application was unavailable for 24 hours as a result. The company is concerned with the overall reliability of its environment.What should the solutions architect do to maximize reliability of the application's infrastructure?
Answer(s): B
The correct answer is B because it improves reliability by protecting the RDS instance with Multi-AZ, and introducing a resilient web tier behind an Application Load Balancer in an Auto Scaling group across multiple AZs, eliminating single points of failure and enabling health-based replacement of unhealthy instances.A is wrong: removing an EC2 and enabling protections alone does not address the DB outage or distribute traffic across AZs; Multi-AZ and load-balanced autoscaling are needed for high availability.C is wrong: adding API Gateway/Lambda with additional DBs increases complexity and does not provide a redundant EC2-based web tier; latency and data consistency concerns arise.D is wrong: using Spot Instances for web servers reduces availability during interruption and does not ensure reliable scaling or fault tolerance; also, health monitoring alone cannot guarantee uptime.
A company is storing 700 terabytes of data on a large network-attached storage (NAS) system in its corporate data center. The company has a hybrid environment with a 10 Gbps AWS Direct Connect connection.After an audit from a regulator, the company has 90 days to move the data to the cloud. The company needs to move the data efficiently and without disruption. The company still needs to be able to access and update the data during the transfer window.Which solution will meet these requirements?
AWS DataSync over Direct Connect efficiently shuttles large NAS datasets to S3 with ongoing access, enabling incremental sync and minimal downtime within the 90-day window.A) Correct: DataSync agent in on-premises environment orchestrates secure, high-performance transfer to S3, supports NFS/SMB NAS, and allows ongoing access during migration with incremental transfers.B) Snowball Edge requires device shipment and does not provide continuous access during the transfer window; longer overall duration and disruption risk.C) Rsync over Direct Connect to S3 is not natively supported for direct SMB/NFS NAS to S3; no built-in delta/verification and can complicate consistency.D) Tape backups and shipment introduce significant downtime, lack real-time access, and are not suitable for rapid, incremental migration.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.