QUESTION: 185

A company has an IoT platform that runs in an on-premises environment. The platform consists of a server that connects to IoT devices by using the MQTT protocol. The platform collects telemetry data from the devices at least once every 5 minutes. The platform also stores device metadata in a MongoDB cluster.

An application that is installed on an on-premises machine runs periodic jobs to aggregate and transform the telemetry and device metadata. The application creates reports that users view by using another web application that runs on the same on-premises machine. The periodic jobs take 120-600 seconds to run. However, the web application is always running.

The company is moving the platform to AWS and must reduce the operational overhead of the stack.

Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)

Use AWS Lambda functions to connect to the IoT devices
Configure the IoT devices to publish to AWS IoT Core
Write the metadata to a self-managed MongoDB database on an Amazon EC2 instance
Write the metadata to Amazon DocumentDB (with MongoDB compatibility)
Use AWS Step Functions state machines with AWS Lambda tasks to prepare the reports and to write the reports to Amazon S3. Use Amazon CloudFront with an S3 origin to serve the reports
Use an Amazon Elastic Kubernetes Service (Amazon EKS) cluster with Amazon EC2 instances to prepare the reports. Use an ingress controller in the EKS cluster to serve the reports

Answer(s): B,D,E

Explanation:

-B) Configure the IoT devices to publish to AWS IoT Core: This reduces operational overhead by using AWS IoT Core, a managed service, to securely connect IoT devices to AWS without needing to manage on-premises connections.
-D) Write the metadata to Amazon DocumentDB (with MongoDB compatibility): Amazon DocumentDB is a fully managed database service compatible with MongoDB, which eliminates the need to self-manage a MongoDB cluster on-premises, reducing the operational burden.
-E) Use AWS Step Functions state machines with AWS Lambda tasks to prepare the reports and to write the reports to Amazon S3. Use Amazon CloudFront with an S3 origin to serve the reports: Step Functions with Lambda provide a serverless architecture for running periodic jobs with minimal management. Using S3 for report storage and CloudFront for content delivery further reduces infrastructure management.
This solution leverages AWS managed services to handle tasks, significantly reducing the operational overhead compared to on-premises alternatives.

Reveal Solution Next Question

QUESTION: 186

A global manufacturing company plans to migrate the majority of its applications to AWS. However, the company is concerned about applications that need to remain within a specific country or in the company's central on-premises data center because of data regulatory requirements or requirements for latency of single-digit milliseconds. The company also is concerned about the applications that it hosts in some of its factory sites, where limited network infrastructure exists.

The company wants a consistent developer experience so that its developers can build applications once and deploy on premises, in the cloud, or in a hybrid architecture. The developers must be able to use the same tools, APIs, and services that are familiar to them.

Which solution will provide a consistent hybrid experience to meet these requirements?

Migrate all applications to the closest AWS Region that is compliant. Set up an AWS Direct Connect connection between the central on-premises data center and AWS. Deploy a Direct Connect gateway.
Use AWS Snowball Edge Storage Optimized devices for the applications that have data regulatory requirements or requirements for latency of single-digit milliseconds. Retain the devices on premises. Deploy AWS Wavelength to host the workloads in the factory sites.
Install AWS Outposts for the applications that have data regulatory requirements or requirements for latency of single-digit milliseconds. Use AWS Snowball Edge Compute Optimized devices to host the workloads in the factory sites.
Migrate the applications that have data regulatory requirements or requirements for latency of single-digit milliseconds to an AWS Local Zone. Deploy AWS Wavelength to host the workloads in the factory sites.

Answer(s): C

Explanation:

-C) Install AWS Outposts for the applications that have data regulatory requirements or requirements for latency of single-digit milliseconds. Use AWS Snowball Edge Compute Optimized devices to host the workloads in the factory sites: AWS Outposts provide a consistent hybrid experience by extending AWS infrastructure, APIs, and tools to the on-premises environment, enabling applications that require low-latency or data residency to remain local. AWS Snowball Edge Compute Optimized devices are designed to operate in environments with limited network connectivity, providing compute and storage capabilities in remote factory sites. This combination ensures consistent tools and developer experience across on-premises, cloud, and hybrid environments.

Reveal Solution Next Question

QUESTION: 187

A company is updating an application that customers use to make online orders. The number of attacks on the application by bad actors has increased recently.

The company will host the updated application on an Amazon Elastic Container Service (Amazon ECS) cluster. The company will use Amazon DynamoDB to store application data. A public Application Load Balancer (ALB) will provide end users with access to the application. The company must prevent attacks and ensure business continuity with minimal service interruptions during an ongoing attack.

Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

Create an Amazon CloudFront distribution with the ALB as the origin. Add a custom header and random value on the CloudFront domain. Configure the ALB to conditionally forward traffic if the header and value match.
Deploy the application in two AWS Regions. Configure Amazon Route 53 to route to both Regions with equal weight.
Configure auto scaling for Amazon ECS tasks Create a DynamoDB Accelerator (DAX) cluster.
Configure Amazon ElastiCache to reduce overhead on DynamoDB.
Deploy an AWS WAF web ACL that includes an appropriate rule group. Associate the web ACL with the Amazon CloudFront distribution.

Answer(s): A,E

Explanation:

-A) Create an Amazon CloudFront distribution with the ALB as the origin. Add a custom header and random value on the CloudFront domain. Configure the ALB to conditionally forward traffic if the header and value match: CloudFront provides a cost-effective layer of protection against attacks by distributing and caching content globally, reducing the load on the ALB. The custom header and value add an additional layer of security, ensuring only legitimate requests reach the application.
-E) Deploy an AWS WAF web ACL that includes an appropriate rule group. Associate the web ACL with the Amazon CloudFront distribution: AWS WAF (Web Application Firewall) helps prevent attacks by filtering malicious traffic before it reaches the application, adding security at the edge. Associating the WAF with CloudFront provides cost-effective protection and helps minimize service interruptions during attacks.
These steps leverage managed AWS services to secure the application and ensure business continuity while minimizing costs.

Reveal Solution Next Question

QUESTION: 188

A company runs a web application on AWS. The web application delivers static content from an Amazon S3 bucket that is behind an Amazon CloudFront distribution. The application serves dynamic content by using an Application Load Balancer (ALB) that distributes requests to a fleet of Amazon EC2 instances in Auto Scaling groups. The application uses a domain name setup in Amazon Route 53.

Some users reported occasional issues when the users attempted to access the website during peak hours. An operations team found that the ALB sometimes returned HTTP 503 Service Unavailable errors. The company wants to display a custom error message page when these errors occur. The page should be displayed immediately for this error code.

Which solution will meet these requirements with the LEAST operational overhead?

Set up a Route 53 failover routing policy. Configure a health check to determine the status of the ALB endpoint and to fail over to the failover S3 bucket endpoint.
Create a second CloudFront distribution and an S3 static website to host the custom error page. Set up a Route 53 failover routing policy. Use an active-passive configuration between the two distributions.
Create a CloudFront origin group that has two origins. Set the ALB endpoint as the primary origin. For the secondary origin, set an S3 bucket that is configured to host a static website Set up origin failover for the CloudFront distribution. Update the S3 static website to incorporate the custom error page.
Create a CloudFront function that validates each HTTP response code that the ALB returns. Create an S3 static website in an S3 bucket. Upload the custom error page to the S3 bucket as a failover. Update the function to read the S3 bucket and to serve the error page to the end users.

Answer(s): C

Explanation:

-C) Create a CloudFront origin group that has two origins. Set the ALB endpoint as the primary origin. For the secondary origin, set an S3 bucket that is configured to host a static website. Set up origin failover for the CloudFront distribution. Update the S3 static website to incorporate the custom error page: This solution uses CloudFront’s built-in origin failover functionality, which provides minimal operational overhead. If the ALB returns a 503 error, CloudFront automatically serves the custom error page from the S3 static website, ensuring users immediately see the error page. It’s a simple, managed solution without the need to configure complex health checks or multiple distributions.

Reveal Solution Next Question

Free AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL Exam Braindumps (page: 47)

QUESTION: 185

Explanation:

QUESTION: 186

Explanation:

QUESTION: 187

Explanation:

QUESTION: 188

Explanation: