A company is building a three-tier application on AWS. The presentation tier will serve a static website The logic tier is a containerized application. This application will store data in a relational database. The company wants to simplify deployment and to reduce operational costs.Which solution will meet these requirements?
Answer(s): A
Using S3 for static hosting, ECS with Fargate for containerized logic tier, and a managed RDS cluster minimizes operational overhead and costs while simplifying deployment.A) Correct: S3 static hosting, ECS with Fargate for serverless compute, and managed RDS provide a scalable, cost-efficient three-tier solution with minimal maintenance.B) CloudFront adds CDN in front of S3, not required for origin simplicity; ECS on EC2 increases management and cost vs Fargate.C) EKS adds Kubernetes management overhead; Fargate option already provides serverless compute for containers.D) EC2 Reserved Instances reduce cost but require capacity planning and maintenance; not as hands-off as Fargate.
A company seeks a storage solution for its application. The solution must be highly available and scalable. The solution also must function as a file system be mountable by multiple Linux instances in AWS and on premises through native protocols, and have no minimum size requirements. The company has set up a Site-to-Site VPN for access from its on-premises network to its VPC.Which storage solution meets these requirements?
Answer(s): C
Amazon EFS with multiple mount targets provides a highly available, scalable file system that can be mounted concurrently by multiple Linux instances across AWS and on-premises via standard NFS, with no minimum size and support for VPN connectivity through VPC. A) FSx Multi-AZ is not mounted as a shared file system across on-prem via native protocols and isn’t inherently scalable for concurrent Linux mounts. B) EBS Multi-Attach enables single volume attachment to multiple instances but is not a shared file system and is limited for cross-AWS/on-prem access. D) A single mount target with multiple access points limits scalability and isolation compared to multiple mount targets. C) is correct.
A 4-year-old media company is using the AWS Organizations all features feature set to organize its AWS accounts. According to the company's finance team, the billing information on the member accounts must not be accessible to anyone, including the root user of the member accounts.Which solution will meet these requirements?
The correct answer is C. A service control policy (SCP) can explicitly deny access to billing information at the OU level, covering all accounts including root actions, which meets the requirement to prevent access by anyone in member accounts.A) IAM policies apply only to users within accounts; you cannot prevent the root user across member accounts using an IAM policy alone. B) Deny policies in identity-based policies can be circumvented by root or not reliably enforced across accounts; SCPs are the centralized control mechanism in Organizations. D) Switching to consolidated billing does not inherently restrict access to billing data; it changes billing aggregation, not access controls.
An ecommerce company runs an application in the AWS Cloud that is integrated with an on-premises warehouse solution. The company uses Amazon Simple Notification Service (Amazon SNS) to send order messages to an on-premises HTTPS endpoint so the warehouse application can process the orders. The local data center team has detected that some of the order messages were not received.A solutions architect needs to retain messages that are not delivered and analyze the messages for up to 14 days.Which solution will meet these requirements with the LEAST development effort?
The correct answer is C. Using an SNS dead-letter queue (DLQ) with an SQS target preserves undelivered messages for up to 14 days in a durable queue that can be analyzed by consuming or inspecting messages, meeting retention and analysis needs with minimal development.A is incorrect because Kinesis Data Streams is not a DLQ for SNS; it would require additional consumer logic and isn’t a native SNS DLQ path. B introduces an SQS between SNS and the on-prem endpoint, adding unnecessary complexity and potential message duplication without leveraging SNS DLQ capabilities. D uses DynamoDB with TTL, which is not a standard SNS DLQ and would complicate ingestion and analysis, missing native SNS DLQ behavior.
A gaming company uses Amazon DynamoDB to store user information such as geographic location, player data, and leaderboards. The company needs to configure continuous backups to an Amazon S3 bucket with a minimal amount of coding. The backups must not affect availability of the application and must not affect the read capacity units (RCUs) that are defined for the table.Which solution meets these requirements?
Answer(s): B
DynamoDB native continuous backups to S3 with minimal coding and without impacting RCUs and availability is provided by DynamoDB point-in-time recovery (PITR) plus export to S3. Option B correctly leverages DynamoDB's native continuous backups and PITR to enable consistent data export to S3 with no impact on table performance. A is incorrect because EMR/Hive adds complexity and processing cost. C is incorrect since DynamoDB Streams with Lambda incurs compute and can affect latency and RCU considerations; it’s not a built-in continuous backup to S3. D is incorrect because regular Lambda export is manual scheduling and PITR alone does not guarantee continuous, low-impact backups to S3.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.