A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance. New company management wants to ensure the application is highly available.What should a solutions architect do to meet this requirement?
Answer(s): A
A) Multi-AZ EC2 Auto Scaling with an Application Load Balancer provides high availability within a single region by distributing traffic across healthy instances and automatically replacing failed ones, while the ALB handles load distribution. B) Snapshots to another region do not ensure high availability during outages or AZ failures. C) Route 53 latency-based routing improves user-perceived latency but does not protect against AZ-level outages for a single AZ deployment. D) Route 53 rules plus a Multi-AZ ALB is redundant; ALB itself handles zonal health checks and routing within the region, and “Multi-AZ ALB” is not a separate resource.
A company uses AWS Organizations. A member account has purchased a Compute Savings Plan. Because of changes in the workloads inside the member account, the account no longer receives the full benefit of the Compute Savings Plan commitment. The company uses less than 50% of its purchased compute power.
Answer(s): B
The correct answer is B.A) Not correct: Discount sharing is configured in the Organizations management account, not in the member account; this enables cross-account application of the Savings Plan benefits within the organization.B) Correct: Discount sharing in the Organizations management account expands Savings Plan coverage to member accounts, ensuring the commitment benefits are applied across the payer account group.C) Incorrect: You cannot migrate workloads to improve individual Savings Plan utilization; savings are based on the payer/linked accounts’ usage, not workload relocation.D) Incorrect: Compute Savings Plans are not sold on a marketplace; they are not tradable like Reserved Instances.
A company is developing a microservices application that will provide a search catalog for customers. The company must use REST APIs to present the frontend of the application to users. The REST APIs must access the backend services that the company hosts in containers in private VPC subnets.Which solution will meet these requirements?
A REST API is required to present a frontend and access backend services in private subnets. API Gateway REST API with a private VPC link to ECS in a private subnet enables secure private connectivity to containers without exposing them publicly, aligning with REST architecture and microservices. Option A uses WebSocket API, not REST. Option C’s security group approach is insufficient for API Gateway to reach ECS in private subnets. Option D’s security group approach is not the standard mechanism for private connectivity from API Gateway to ECS; a VPC Link is the correct pattern. Therefore B is correct.
A company stores raw collected data in an Amazon S3 bucket. The data is used for several types of analytics on behalf of the company's customers. The type of analytics requested determines the access pattern on the S3 objects.The company cannot predict or control the access pattern. The company wants to reduce its S3 costs.Which solution will meet these requirements?
Answer(s): C
S) C) Using S3 Lifecycle rules to transition objects from S3 Standard to S3 Intelligent-Tiering is correct because Intelligent-Tiering automatically moves objects between access tiers based on changing access patterns without performance impact or retrieval fees, optimizing cost for unpredictable access. A) S3 replication is for cross-region/copying; it does not optimize cost for access patterns. B) Lifecycle to Standard-IA requires knowing access patterns and incurs retrieval costs when accessed, not ideal for unpredictable access. D) S3 Inventory only reports objects; it does not perform automatic tiering or cost optimization.
A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet. However the company’s security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?
Answer(s): D
The correct choice D is right because an egress-only internet gateway allows outbound IPv6 traffic to the internet while preventing unsolicited inbound connections, satisfying the policy that external services cannot initiate connections to EC2 IPv6 instances. A) NAT gateway only supports IPv4 and is useless for IPv6 outbound; it would not apply to IPv6 traffic. B) Internet gateway enables bi-directional IPv6 traffic and inbound connections, violating the policy. C) Virtual private gateway is for VPN connections to on-premises networks, not internet egress. D) Egress-only internet gateway specifically targets outbound IPv6 access, blocking inbound initiation.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.