QUESTION: 201

A company is planning a one-time migration of an on-premises MySQL database to Amazon Aurora MySQL in the us-east-1 Region. The company's current internet connection has limited bandwidth. The on-premises MySQL database is 60 TB in size. The company estimates that it will take a month to transfer the data to AWS over the current internet connection. The company needs a migration solution that will migrate the database more quickly.

Which solution will migrate the database in the LEAST amount of time?

Request a 1 Gbps AWS Direct Connect connection between the on-premises data center and AWS. Use AWS Database Migration Service (AWS DMS) to migrate the on-premises MySQL database to Aurora MySQL.
Use AWS DataSync with the current internet connection to accelerate the data transfer between the on-premises data center and AWS. Use AWS Application Migration Service to migrate the on-premises MySQL database to Aurora MySQL.
Order an AWS Snowball Edge device. Load the data into an Amazon S3 bucket by using the S3 interface. Use AWS Database Migration Service (AWS DMS) to migrate the data from Amazon S3 to Aurora MySQL.
Order an AWS Snowball device. Load the data into an Amazon S3 bucket by using the S3 Adapter for Snowball. Use AWS Application Migration Service to migrate the data from Amazon S3 to Aurora MySQL.

Answer(s): C

Explanation:

-C) Order an AWS Snowball Edge device. Load the data into an Amazon S3 bucket by using the S3 interface. Use AWS Database Migration Service (AWS DMS) to migrate the data from Amazon S3 to Aurora MySQL: This solution leverages AWS Snowball Edge, which is ideal for large-scale data transfers, especially when bandwidth is limited. Snowball allows for secure, fast data transfer to AWS by physically shipping the device. Once the data is transferred to S3, AWS DMS can handle the migration from S3 to Aurora MySQL. This approach significantly reduces migration time compared to transferring over a slow internet connection.
This solution minimizes migration time while addressing the bandwidth constraint.

Reveal Solution Next Question

QUESTION: 202

A company has an application in the AWS Cloud. The application runs on a fleet of 20 Amazon EC2 instances. The EC2 instances are persistent and store data on multiple attached Amazon Elastic Block Store (Amazon EBS) volumes.

The company must maintain backups in a separate AWS Region. The company must be able to recover the EC2 instances and their configuration within 1 business day, with loss of no more than 1 day's worth of data. The company has limited staff and needs a backup solution that optimizes operational efficiency and cost. The company already has created an AWS CloudFormation template that can deploy the required network configuration in a secondary Region.

Which solution will meet these requirements?

Create a second CloudFormation template that can recreate the EC2 instances in the secondary Region. Run daily multivolume snapshots by using AWS Systems Manager Automation runbooks. Copy the snapshots to the secondary Region. In the event of a failure launch the CloudFormation templates, restore the EBS volumes from snapshots, and transfer usage to the secondary Region.
Use Amazon Data Lifecycle Manager (Amazon DLM) to create daily multivolume snapshots of the EBS volumes. In the event of a failure, launch the CloudFormation template and use Amazon DLM to restore the EBS volumes and transfer usage to the secondary Region.
Use AWS Backup to create a scheduled daily backup plan for the EC2 instances. Configure the backup task to copy the backups to a vault in the secondary Region. In the event of a failure, launch the CloudFormation template, restore the instance volumes and configurations from the backup vault, and transfer usage to the secondary Region.
Deploy EC2 instances of the same size and configuration to the secondary Region. Configure AWS DataSync daily to copy data from the primary Region to the secondary Region. In the event of a failure, launch the CloudFormation template and transfer usage to the secondary Region.

Answer(s): C

Explanation:

-C) Use AWS Backup to create a scheduled daily backup plan for the EC2 instances. Configure the backup task to copy the backups to a vault in the secondary Region. In the event of a failure, launch the CloudFormation template, restore the instance volumes and configurations from the backup vault, and transfer usage to the secondary Region: AWS Backup is a fully managed service that simplifies and automates backup tasks. It supports creating backups of EBS volumes and copying them across regions, meeting the requirement to maintain backups in a separate region. It also reduces operational overhead by automating backup and recovery tasks, making it suitable for limited staff. This solution meets the requirement for 1-day RPO and RTO, allowing efficient recovery in the event of a disaster.
This solution optimizes cost and operational efficiency while ensuring the recovery of EC2 instances and their configurations.

Reveal Solution Next Question

QUESTION: 203

A company is designing a new website that hosts static content. The website will give users the ability to upload and download large files. According to company requirements, all data must be encrypted in transit and at rest. A solutions architect is building the solution by using Amazon S3 and Amazon CloudFront.

Which combination of steps will meet the encryption requirements? (Choose three.)

Turn on S3 server-side encryption for the S3 bucket that the web application uses.
Add a policy attribute of "aws:SecureTransport": "true" for read and write operations in the S3 ACLs.
Create a bucket policy that denies any unencrypted operations in the S3 bucket that the web application uses.
Configure encryption at rest on CloudFront by using server-side encryption with AWS KMS keys (SSE-KMS).
Configure redirection of HTTP requests to HTTPS requests in CloudFront.
Use the RequireSSL option in the creation of presigned URLs for the S3 bucket that the web application uses.

Answer(s): A,C,E

Explanation:

-A: Turning on S3 server-side encryption ensures that data is encrypted at rest.
-C: A bucket policy denying unencrypted operations ensures that all data is encrypted during storage.
-E: Redirecting HTTP requests to HTTPS in CloudFront ensures encryption in transit.
This combination meets the encryption requirements for both in-transit and at-rest data.

Reveal Solution Next Question

QUESTION: 204

A company is implementing a serverless architecture by using AWS Lambda functions that need to access a Microsoft SQL Server DB instance on Amazon RDS. The company has separate environments for development and production, including a clone of the database system.

The company's developers are allowed to access the credentials for the development database. However, the credentials for the production database must be encrypted with a key that only members of the IT security team's IAM user group can access. This key must be rotated on a regular basis.

What should a solutions architect do in the production environment to meet these requirements?

Store the database credentials in AWS Systems Manager Parameter Store by using a SecureString parameter that is encrypted by an AWS Key Management Service (AWS KMS) customer managed key. Attach a role to each Lambda function to provide access to the SecureString parameter. Restrict access to the SecureString parameter and the customer managed key so that only the IT security team can access the parameter and the key.
Encrypt the database credentials by using the AWS Key Management Service (AWS KMS) default Lambda key. Store the credentials in the environment variables of each Lambda function. Load the credentials from the environment variables in the Lambda code. Restrict access to the KMS key so that only the IT security team can access the key.
Store the database credentials in the environment variables of each Lambda function. Encrypt the environment variables by using an AWS Key Management Service (AWS KMS) customer managed key. Restrict access to the customer managed key so that only the IT security team can access the key.
Store the database credentials in AWS Secrets Manager as a secret that is associated with an AWS Key Management Service (AWS KMS) customer managed key. Attach a role to each Lambda function to provide access to the secret. Restrict access to the secret and the customer managed key so that only the IT security team can access the secret and the key.

Answer(s): D

Explanation:

D: Storing database credentials in AWS Secrets Manager ensures secure management of secrets with automatic rotation. Associating the secret with a KMS customer managed key allows for fine-grained access control, ensuring that only the IT security team can access the secret and the key. This setup meets the requirements for secure credential management and key rotation, making it ideal for production environments.

Reveal Solution Next Question

Free AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL Exam Braindumps (page: 51)

QUESTION: 201

Explanation:

QUESTION: 202

Explanation:

QUESTION: 203

Explanation:

QUESTION: 204

Explanation: