A company runs applications on Amazon EC2 instances in one AWS Region. The company wants to back up the EC2 instances to a second Region. The company also wants to provision EC2 resources in the second Region and manage the EC2 instances centrally from one AWS account.Which solution will meet these requirements MOST cost-effectively?
Answer(s): C
AWS Backup with cross-Region backups for EC2 provides centralized, automated, and cost-effective backup across regions from one account, enabling recovery and cross-region provisioning with policy-based management.A) DR plan with similar instances and data replication is not cost-optimal; it doubles resources without centralized backup management.B) EBS snapshots copied across regions are valuable but require manual scheduling and lack end-to-end backup governance and centralized restore capabilities.D) Deploying identical instances in the second region and using DataSync incurs more compute and operational overhead, not a dedicated backup solution.C) AWS Backup offers automated cross-region backups and centralized protection for EC2, meeting cost and management goals.
A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identity provider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data. The company must use Applicability Statement 2 (AS2) protocol.Which solution will meet these requirements?
AWS Transfer Family supports AS2 for secure data transfer over the internet, enabling integration with an external IdP for authentication. Option C uses AWS Transfer Family for AS2 and a Lambda function to handle IdP authentication, which aligns with AS2 workflow and server-side authentication needs. The other options: A uses DataSync (not AS2) and misplaces IdP auth; B relies on AppFlow (not AS2) and ECS; D uses Storage Gateway (not AS2) and Cognito, which is not aligned with AS2 protocol requirements. Therefore C is correct because it matches AS2 protocol support with IdP-driven authentication.
A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service. The application requires 1 GB of memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format.Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)
Answer(s): B,C
The correct combination is B) AWS Lambda and C) Amazon RDS. Lambda provides serverless compute with 1 GB memory option and no server management, meeting the compute needs with minimal administration. RDS provides a relational database service with managed storage and backups, satisfying the 2 GB storage in relational format while reducing maintenance. A) Amazon EC2 requires manual provisioning and OS maintenance, increasing administrative effort. D) Amazon DynamoDB is non-relational, not suitable for relational data. E) Amazon EKS adds container orchestration complexity and more overhead for this use case.
A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags.An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorer for all AWS accounts within the organization and needs to access all reports from Cost Explorer.Which solution meets these requirements in the MOST operationally efficient way?
Answer(s): A
Activating a user-defined cost allocation tag in the Organizations management (master) account ensures tag-based cost reporting applies across all member accounts, satisfying centralized cost attribution. Creating a single Cost Explorer report grouped by the tag and filtering for EC2 provides the required department-level view across the organization.A) Correct because it uses the master account to enable a user-defined tag and aggregates costs across accounts.B) Incorrect because AWS-defined tags are not created by users and may not align with internal department taxonomy.C) Incorrect because enabling the tag in a member account would not guarantee centralized, organization-wide reporting.D) Incorrect for the same reason: relying on a member account does not provide centralized, consolidated cost data across the organization.
A company wants to securely exchange data between its software as a service (SaaS) application Salesforce account and Amazon S3. The company must encrypt the data at rest by using AWS Key Management Service (AWS KMS) customer managed keys (CMKs). The company must also encrypt the data in transit. The company has enabled API access for the Salesforce account.
Salesforce to S3 integration with built-in secure transit and at-rest encryption using CMKs is natively supported by Amazon AppFlow, which integrates Salesforce as a source and S3 as a destination and can enforce KMS CMKs for S3 data at rest and uses TLS for in-transit encryption.A) Not optimal for direct Salesforce-to-S3 data transfer with managed encryption; Lambda adds custom orchestration but requires additional configuration and lacks built-in Salesforce-S3 flow guarantees.B) Step Functions is a general orchestration service, not specialized for secure data transfer between Salesforce and S3 with CMK integration.D) Custom connector adds development effort and maintenance; lacks the out-of-the-box, managed flow and CMK integration provided by AppFlow.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.