QUESTION: 289

A company ingests and processes streaming market data. The data rate is constant. A nightly process that calculates aggregate statistics takes 4 hours to complete. The statistical analysis is not critical to the business, and data points are processed during the next iteration if a particular run fails.

The current architecture uses a pool of Amazon EC2 Reserved Instances with 1-year reservations. These EC2 instances run full time to ingest and store the streaming data in attached Amazon Elastic Block Store (Amazon EBS) volumes. A scheduled script launches EC2 On-Demand Instances each night to perform the nightly processing. The instances access the stored data from NFS shares on the ingestion servers. The script terminates the instances when the processing is complete.

The Reserved Instance reservations are expiring. The company needs to determine whether to purchase new reservations or implement a new design.

Which solution will meet these requirements MOST cost-effectively?

Update the ingestion process to use Amazon Kinesis Data Firehose to save data to Amazon S3. Use a scheduled script to launch a fleet of EC2 On-Demand Instances each night to perform the batch processing of the S3 data. Configure the script to terminate the instances when the processing is complete.
Update the ingestion process to use Amazon Kinesis Data Firehose to save data to Amazon S3. Use AWS Batch with Spot Instances to perform nightly processing with a maximum Spot price that is 50% of the On-Demand price.
Update the ingestion process to use a fleet of EC2 Reserved Instances with 3-year reservations behind a Network LoadBalancer. Use AWS Batch with Spot Instances to perform nightly processing with a maximum Spot price that is 50% of the On-Demand price.
Update the ingestion process to use Amazon Kinesis Data Firehose to save data to Amazon Redshift. Use Amazon EventBridge to schedule an AWS Lambda function to run nightly to query Amazon Redshift to generate the daily statistics.

Answer(s): B

Explanation:

B) is the most cost-effective solution because it optimizes the existing architecture while leveraging AWS services that reduce costs:
-Amazon Kinesis Data Firehose is used to ingest streaming data and automatically store it in Amazon S3, eliminating the need for always-on EC2 instances for data ingestion and reducing costs associated with long-running Reserved Instances.
-AWS Batch can dynamically launch Spot Instances at up to 50% of the On-Demand price to perform the nightly batch processing. Spot Instances are highly cost-effective for non-critical, fault-tolerant jobs like statistical analysis, which can tolerate interruptions.
-The combination of using S3 for storage and Spot Instances for processing significantly lowers both compute and storage costs while maintaining reliability for the workload.
This approach reduces the overall infrastructure footprint and optimizes both storage and compute costs.

Reveal Solution Next Question

QUESTION: 290

A company needs to migrate an on-premises SFTP site to AWS. The SFTP site currently runs on a Linux VM. Uploaded files are made available to downstream applications through an NFS share.

As part of the migration to AWS, a solutions architect must implement high availability. The solution must provide external vendors with a set of static public IP addresses that the vendors can allow. The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC.

Which solution will meet these requirements with the LEAST operational overhead?

Create an AWS Transfer Family server. Configure an internet-facing VPC endpoint for the Transfer Family server. Specify an Elastic IP address for each subnet. Configure the Transfer Family server to place files into an Amazon Elastic File System (Amazon EFS) file system that is deployed across multiple Availability Zones. Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead.
Create an AWS Transfer Family server. Configure a publicly accessible endpoint for the Transfer Family server. Configure the Transfer Family server to place files into an Amazon Elastic File System (Amazon EFS) file system that is deployed across multiple Availability Zones. Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead.
Use AWS Application Migration Service to migrate the existing Linux VM to an Amazon EC2 instance. Assign an Elastic IP address to the EC2 instance. Mount an Amazon Elastic File System (Amazon EFS) file system to the EC2 instance. Configure the SFTP server to place files in the EFS file system. Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead.
Use AWS Application Migration Service to migrate the existing Linux VM to an AWS Transfer Family server. Configure a publicly accessible endpoint for the Transfer Family server. Configure the Transfer Family server to place files into an Amazon FSx for Lustre file system that is deployed across multiple Availability Zones. Modify the configuration on the downstream applications that access the existing NFS share to mount the FSx for Lustre endpoint instead.

Answer(s): A

Explanation:

A) is the best solution for meeting the requirements with the least operational overhead because:
-AWS Transfer Family provides a fully managed, high-availability SFTP solution, eliminating the need to manage an EC2 instance for SFTP services. It also supports internet-facing endpoints with static Elastic IP addresses for external vendors to allowlist.
-Amazon Elastic File System (Amazon EFS) provides a highly available and scalable file storage solution across multiple Availability Zones, offering a direct replacement for the NFS share with minimal changes required to downstream applications.
-The Transfer Family server can place files into EFS, ensuring high availability and easy scaling without needing to manage infrastructure, thus minimizing operational overhead.
This solution meets the high availability, public IP address, and NFS compatibility requirements while reducing operational complexity by using managed services like Transfer Family and EFS.

Reveal Solution Next Question

QUESTION: 291

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group. The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting. The VPC is connected to an on-premises environment and connectivity cannot be interrupted. The maximum size of the Auto Scaling group is 20 instances in service. The VPC IPv4 addressing is as follows:

•VPC CIDR: 10.0.0.0/23
•AZ1 subnet CIDR: 10.0.0.0/24
•AZ2 subnet CIDR: 10.0.1.0/24

Since deployment, a third AZ has become available in the Region. The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime. Which solution will meet these requirements?

Update the Auto Scaling group to use the AZ2 subnet only. Delete and re-create the AZ1 subnet using half the previous address space. Adjust the Auto Scaling group to also use the new AZ1 subnet. When the instances are healthy, adjust the Auto Scaling group to use the AZ1 subnet only. Remove the current AZ2 subnet. Create a new AZ2 subnet using the second half of the address space from the original AZ1 subnet. Create a new AZ3 subnet using half the original AZ2 subnet address space, then update the Auto Scaling group to target all three new subnets.
Terminate the EC2 instances in the AZ1 subnet. Delete and re-create the AZ1 subnet using half the address space. Update the Auto Scaling group to use this new subnet. Repeat this for the second AZ. Define a new subnet in AZ3, then update the Auto Scaling group to target all three new subnets.
Create a new VPC with the same IPv4 address space and define three subnets, with one for each AZ. Update the existing Auto Scaling group to target the new subnets in the new VP
Update the Auto Scaling group to use the AZ2 subnet only. Update the AZ1 subnet to have half the previous address space. Adjust the Auto Scaling group to also use the AZ1 subnet again. When the instances are healthy, adjust the Auto Scaling group to use the AZ1 subnet only. Update the current AZ2 subnet and assign the second half of the address space from the original AZ1 subnet. Create a new AZ3 subnet using half the original AZ2 subnet address space, then update the Auto Scaling group to target all three new subnets.

Answer(s): A

Explanation:

A) is the best solution because it addresses the need to adopt a third AZ without adding additional IPv4 address space and without causing service downtime:
-First, the solution adjusts the AZ1 subnet by reducing its address space and redistributing half of it, ensuring minimal disruption to the existing operations by keeping traffic in AZ2.
-Next, once the AZ1 subnet is updated and instances are healthy, it allows the AZ2 subnet to be split and redistributed as well, effectively expanding the architecture to a new AZ3 without impacting connectivity to the on-premises environment.
-This method incrementally adjusts the address space and subnets while keeping the Auto Scaling group active and maintaining connectivity.
This approach provides a seamless migration to three AZs with minimal service impact and no interruption to on-premises connectivity.

Reveal Solution Next Question

QUESTION: 292

A company uses an organization in AWS Organizations to manage the company's AWS accounts. The company uses AWS CloudFormation to deploy all infrastructure. A finance team wants to build a chargeback model. The finance team asked each business unit to tag resources by using a predefined list of project values.

When the finance team used the AWS Cost and Usage Report in AWS Cost Explorer and filtered based on project, the team noticed noncompliant project values. The company wants to enforce the use of project tags for new resources.

Which solution will meet these requirements with the LEAST effort?

Create a tag policy that contains the allowed project tag values in the organization's management account. Create an SCP that denies the cloudformation:CreateStack API operation unless a project tag is added. Attach the SCP to each OU.
Create a tag policy that contains the allowed project tag values in each OU. Create an SCP that denies the cloudformation:CreateStack API operation unless a project tag is added. Attach the SCP to each OU.
Create a tag policy that contains the allowed project tag values in the AWS management account. Create an IAM policy that denies the cloudformation:CreateStack API operation unless a project tag is added. Assign the policy to each user.
Use AWS Service Catalog to manage the CloudFormation stacks as products. Use a TagOptions library to control project tag values. Share the portfolio with all OUs that are in the organization.

Answer(s): A

Explanation:

A) is the best solution as it involves:
-Creating a tag policy in the organization's management account that enforces a predefined list of project tag values, ensuring compliance across all AWS accounts within the organization.
-Using a Service Control Policy (SCP) to deny the cloudformation:CreateStack operation unless a valid project tag is added. This prevents the creation of resources that don't follow the tag policy.
-Attaching the SCP to each Organizational Unit (OU) ensures the policy is applied consistently across all business units.
This solution offers centralized management with minimal operational overhead, ensuring that project tags are enforced for new resources across all accounts in the organization.

Reveal Solution Next Question

Free AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL Exam Braindumps (page: 73)

QUESTION: 289

Explanation:

QUESTION: 290

Explanation:

QUESTION: 291

Explanation:

QUESTION: 292

Explanation: