A company stores data in PDF format in an Amazon S3 bucket. The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): D
S) D) is correct because S3 Object Lock in Compliance mode enforces write-once-read-many immutable retention for objects, and S3 Batch Operations can apply retention settings to billions of existing objects, achieving 7-year retention with minimal manual effort. A) incorrect because Versioning with Lifecycle deletes does not guarantee immutability for the full 7 years and MFA delete is not applicable to all object retention, nor does it enforce retention. B) incorrect because governance mode allows override by IAM, undermining legal retention. C) incorrect because governance/compliance modes differ; for existing data, re-copied objects in Compliance mode with Batch Operations (via D) is the scalable, compliant approach.
A company has a stateless web application that runs on AWS Lambda functions that are invoked by Amazon API Gateway. The company wants to deploy the application across multiple AWS Regions to provide Regional failover capabilities.What should a solutions architect do to route traffic to multiple Regions?
Answer(s): A
Route 53 health checks with an active-active configuration provide DNS-based multi-region routing and automatic failover for a stateless API backed by Lambda/API Gateway. This enables global users to resolve to healthy Regional endpoints and fail over without client changes.A) Correct: Route 53 health checks enable region-aware routing with health-based failover, suitable for multi-region Lambda/API Gateway deployments.B) CloudFront is not ideal for routing to multiple regional API Gateway endpoints with region-aware failover; it’s designed for edge caching and may add complexity for API Gateway origins.C) Transit Gateway is for VPC connectivity, not for directing API Gateway traffic across Regions.D) Application Load Balancer cannot route to API Gateway regional hostnames; ALB targets are within a VPC, not external API Gateway endpoints.
A company has two VPCs named Management and Production. The Management VPC uses VPNs through a customer gateway to connect to a single device in the data center. The Production VPC uses a virtual private gateway with two attached AWS Direct Connect connections. The Management and Production VPCs both use a single VPC peering connection to allow communication between the applications.What should a solutions architect do to mitigate any single point of failure in this architecture?
Answer(s): C
The correct option is C) Add a second set of VPNs to the Management VPC from a second customer gateway device. The single point of failure is the on-premises connection to the Management VPC via a single customer gateway. Deploying a second VPN tunnel from a separate customer gateway device provides redundant on‑prem connectivity, eliminating the single failure domain at the on‑premises link. A) would still rely on the same on‑premises device; B) adds redundancy only for the Management VPC’s attachment but does not address the on‑premises link; D) adds another VPC peering path, but peering remains a single path and cannot provide on‑premises resilience.
A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access.Which solution will help the company migrate the database to AWS MOST cost-effectively?
Answer(s): B
Rationale: RDS Custom for Oracle provides managed control with privileges and access needed for third-party features while reducing DBA maintenance, making it the most cost-effective path for a near-term migration without rewriting substantial code.A) Incorrect: RDS for Oracle limits access to OS-level privileges and customizations; third-party features requiring elevated privileges may not be supported.C) Incorrect: EC2 with Oracle requires full self-management of backups, patching, and privileges, increasing cost and maintenance.D) Incorrect: Rewriting to PostgreSQL adds significant effort and downtime, not cost-effective for a quick migration; also needs code changes and potential feature gaps.
A company has a three-tier web application that is in a single server. The company wants to migrate the application to the AWS Cloud. The company also wants the application to align with the AWS Well-Architected Framework and to be consistent with AWS recommended best practices for security, scalability, and resiliency.Which combination of solutions will meet these requirements? (Choose three.)
Answer(s): C,E,F
C) A properly segmented VPC with separate private subnets for web, application, and database tiers, each with Auto Scaling for the web and application tiers, aligns with the Well-Architected Framework for scalability, isolation, and fault tolerance.E) Elastic Load Balancers in front of the web tier provide fault tolerance and distribution across AZs, with security groups controlling cross-layer access, satisfying security and resiliency best practices.F) RDS Multi-AZ in private subnets, with access restricted to the application tier security groups, ensures high availability and secure database access.A) uses existing single-server architecture, not scalable or multi-tier isolation.B) only secures access at DB layer, lacks multi-tier separation and HA.D) single RDS with broad access risks security and resilience; lacks multi-AZ and tiered access.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.