QUESTION: 177

A solutions architect is designing a solution to process events. The solution must have the ability to scale in and out based on the number of events that the solution receives. If a processing error occurs, the event must move into a separate queue for review.

Which solution will meet these requirements?

Send event details to an Amazon Simple Notification Service (Amazon SNS) topic. Configure an AWS Lambda function as a subscriber to the SNS topic to process the events. Add an on-failure destination to the function. Set an Amazon Simple Queue Service (Amazon SQS) queue as the target.
Publish events to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon EC2 Auto Scaling group. Configure the Auto Scaling group to scale in and out based on the ApproximateAgeOfOldestMessage metric of the queue. Configure the application to write failed messages to a dead-letter queue.
Write events to an Amazon DynamoDB table. Configure a DynamoDB stream for the table. Configure the stream to invoke an AWS Lambda function. Configure the Lambda function to process the events.
Publish events to an Amazon EventBndge event bus. Create and run an application on an Amazon EC2 instance with an Auto Scaling group that is behind an Application Load Balancer (ALB). Set the ALB as the event bus target. Configure the event bus to retry events. Write messages to a dead-letter queue if the application cannot process the messages.

Answer(s): A

Explanation:

The selected solution is B because it integrates AWS Data Exchange directly with the Amazon Redshift cluster, allowing the company to create a datashare that enables secure and efficient data sharing with customers.
This approach meets the requirements by:
1.Subscription Verification: It confirms customer identities before granting access to the data.
2.Real-Time Access: Customers can access the most recent data stored in Redshift, ensuring timely availability without manual intervention.
By utilizing managed services, this solution minimizes operational overhead while effectively meeting the company's data sharing needs.

Reveal Solution Next Question

QUESTION: 178

A company runs a processing engine in the AWS Cloud. The engine processes environmental data from logistics centers to calculate a sustainability index. The company has millions of devices in logistics centers that are spread across Europe. The devices send information to the processing engine through a RESTful API.

The API experiences unpredictable bursts of traffic. The company must implement a solution to process all data that the devices send to the processing engine. Data loss is unacceptable.

Which solution will meet these requirements?

Create an Application Load Balancer (ALB) for the RESTful API. Create an Amazon Simple Queue Service (Amazon SQS) queue. Create a listener and a target group for the ALB Add the SQS queue as the target. Use a container that runs in Amazon Elastic Container Service (Amazon ECS) with the Fargate launch type to process messages in the queue.
Create an Amazon API Gateway HTTP API that implements the RESTful API. Create an Amazon Simple Queue Service (Amazon SQS) queue. Create an API Gateway service integration with the SQS queue. Create an AWS Lambda function to process messages in the SQS queue.
Create an Amazon API Gateway REST API that implements the RESTful API. Create a fleet of Amazon EC2 instances in an Auto Scaling group. Create an API Gateway Auto Scaling group proxy integration. Use the EC2 instances to process incoming data.
Create an Amazon CloudFront distribution for the RESTful API. Create a data stream in Amazon Kinesis Data Streams. Set the data stream as the origin for the distribution. Create an AWS Lambda function to consume and process data in the data stream.

Answer(s): B

Explanation:

Reveal Solution Next Question

QUESTION: 179

A company is designing its network configuration in the AWS Cloud. The company uses AWS Organizations to manage a multi-account setup. The company has three OUs. Each OU contains more than 100 AWS accounts. Each account has a single VPC, and all the VPCs in each OU are in the same AWS Region.

The CIDR ranges for all the AWS accounts do not overlap. The company needs to implement a solution in which VPCs in the same OU can communicate with each other but cannot communicate with VPCs in other OUs.

Which solution will meet these requirements with the LEAST operational overhead?

Create an AWS CloudFormation stack set that establishes VPC peering between accounts in each OU. Provision the stack set in each OU.
In each OU, create a dedicated networking account that has a single VPC. Share this VPC with all the other accounts in the OU by using AWS Resource Access Manager (AWS RAM). Create a VPC peering connection between the networking account and each account in the OU.
Provision a transit gateway in an account in each OU. Share the transit gateway across the organization by using AWS Resource Access Manager (AWS RAM). Create transit gateway VPC attachments for each VP
In each OU, create a dedicated networking account that has a single VPC. Establish a VPN connection between the networking account and the other accounts in the OU. Use third-party routing software to route transitive traffic between the VPCs.

Answer(s): C

Explanation:

The selected solution is C because provisioning a transit gateway in each OU simplifies VPC communication within the OU while ensuring isolation from other OUs.
Key benefits of this approach include:
1.Centralized Management: The transit gateway allows centralized routing for all VPCs within the OU, reducing complexity compared to managing individual VPC peering connections.
2.Scalability: It easily accommodates additional accounts or VPCs within the same OU without needing extensive configuration changes.
3.Isolation: By sharing the transit gateway only within the OU, communication with VPCs in other OUs is effectively blocked, meeting the company’s security requirements.
This solution requires the least operational overhead while achieving the desired network architecture.

Reveal Solution Next Question

QUESTION: 180

A company is migrating an application to AWS. It wants to use fully managed services as much as possible during the migration. The company needs to store large important documents within the application with the following requirements:

1. The data must be highly durable and available
2. The data must always be encrypted at rest and in transit
3. The encryption key must be managed by the company and rotated periodically

Which of the following solutions should the solutions architect recommend?

Deploy the storage gateway to AWS in file gateway mode. Use Amazon EBS volume encryption using an AWS KMS key to encrypt the storage gateway volumes.
Use Amazon S3 with a bucket policy to enforce HTTPS for connections to the bucket and to enforce server-side encryption and AWS KMS for object encryption.
Use Amazon DynamoDB with SSL to connect to DynamoDB. Use an AWS KMS key to encrypt DynamoDB objects at rest.
Deploy instances with Amazon EBS volumes attached to store this data. Use EBS volume encryption using an AWS KMS key to encrypt the data.

Answer(s): B

Explanation:

The selected solution is B because using Amazon S3 meets all the company's requirements for storing large documents while leveraging fully managed services.
1.High Durability and Availability: Amazon S3 is designed for 99.999999999% (11 nines) durability and offers high availability, making it suitable for storing critical documents.
2.Encryption: S3 allows you to enforce HTTPS for secure data transmission, ensuring encryption in transit. Additionally, server-side encryption with AWS KMS (Key Management Service) allows for encryption at rest using customer-managed keys.
3.Key Management: With AWS KMS, the company has full control over the encryption keys, including the ability to rotate them periodically according to its security policies.
This solution offers a simple, scalable, and secure way to manage large documents in the cloud, aligning perfectly with the company's objectives of using fully managed services.

Reveal Solution Next Question

Free AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL Exam Braindumps (page: 45)

QUESTION: 177

Explanation:

QUESTION: 178

Explanation:

QUESTION: 179

Explanation:

QUESTION: 180

Explanation: