A company runs a content management application on a single Windows Amazon EC2 instance in a development environment. The application reads and writes static content to a 2 TB Amazon Elastic Block Store (Amazon EBS) volume that is attached to the instance as the root device. The company plans to deploy this application in production as a highly available and fault-tolerant solution that runs on at least three EC2 instances across multiple Availability Zones.A solutions architect must design a solution that joins all the instances that run the application to an Active Directory domain. The solution also must implement Windows ACLs to control access to file contents. The application always must maintain exactly the same content on all running instances at any given point in time.Which solution will meet these requirements with the LEAST management overhead?
Answer(s): C
To meet the requirements of deploying the content management application in a highly available and fault-tolerant manner while maintaining synchronization of content across multiple EC2 instances, the recommended solution is:C) Create an Amazon FSx for Windows File Server file system. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instances. Implement a user data script to install the application and mount the FSx for Windows File Server file system. Perform a seamless domain join to join the instance to the AD domain.1.Amazon FSx for Windows File Server: This fully managed Windows file system is designed to work with Windows applications. It supports SMB protocols, Active Directory integration, and Windows ACLs, making it suitable for applications that require shared access to file content across multiple instances while maintaining access control.2.Auto Scaling Group: By creating an Auto Scaling group that spans multiple Availability Zones, the solution ensures high availability and fault tolerance. This setup allows the application to automatically scale based on demand while maintaining a minimum of three instances to ensure redundancy.3.User Data Script: The user data script can be utilized to automate the installation of the application and join the instances to the Active Directory domain seamlessly. This reduces manual intervention and operational overhead.4.Consistent Content Across Instances: By using FSx for Windows File Server, all instances can access the same content stored on the shared file system, ensuring that they maintain exactly the same content at all times.Overall, this solution is efficient, minimizes management overhead, and meets the requirements for high availability, fault tolerance, and proper access control through Windows ACLs.
A software as a service (SaaS) based company provides a case management solution to customers A3 part of the solution. The company uses a standalone Simple Mail Transfer Protocol (SMTP) server to send email messages from an application. The application also stores an email template for acknowledgement email messages that populate customer data before the application sends the email message to the customer.The company plans to migrate this messaging functionality to the AWS Cloud and needs to minimize operational overhead.Which solution will meet these requirements MOST cost-effectively?
Answer(s): D
The most cost-effective solution for migrating the email functionality of the SaaS company to the AWS Cloud while minimizing operational overhead is:D) Set up Amazon Simple Email Service (Amazon SES) to send email messages. Store the email template on Amazon SES with parameters for the customer data. Create an AWS Lambda function to call the SendTemplatedEmail API operation and to pass customer data to replace the parameters and the email destination.1.Amazon SES: By using Amazon SES, the company leverages a fully managed email service designed for sending emails at scale, which reduces the complexity of managing a standalone SMTP server. This service also provides features like deliverability, tracking, and compliance out of the box.2.Email Templates: Storing email templates directly within Amazon SES allows for easy management and use of templates, including dynamic parameterization for customer data. This means less overhead in managing external templates and simplifies the integration process.3.AWS Lambda Function: The use of a Lambda function to call the SendTemplatedEmail API operation allows for serverless execution of the email sending process. It dynamically populates the templates with customer data, thus ensuring personalized communication without needing a dedicated server.4.Operational Overhead: This solution minimizes operational overhead since AWS SES handles the complexities of email delivery, and the serverless architecture of AWS Lambda eliminates the need for ongoing server management.Overall, this combination effectively meets the company's requirements for sending acknowledgment emails to customers while being cost-effective and easy to manage.
A company is processing videos in the AWS Cloud by Using Amazon EC2 instances in an Auto Scaling group. It takes 30 minutes to process a video Several EC2 instances scale in and out depending on the number of videos in an Amazon Simple Queue Service (Amazon SQS) queue.The company has configured the SQS queue with a redrive policy that specifies a target dead-letter queue and a maxReceiveCount of 1. The company has set the visibility timeout for the SQS queue to 1 hour. The company has set up an Amazon CloudWatch alarm to notify the development team when there are messages in the dead-letter queue.Several times during the day. the development team receives notification that messages are in the dead-letter queue and that videos have not been processed property. An investigation finds no errors m the application logs.How can the company solve this problem?
The best solution for addressing the issue of videos not being processed properly and ending up in the dead-letter queue is:C) Configure scale-in protection for the instances during processing.1.Understanding the Problem: The company has set a visibility timeout for the SQS queue of 1 hour, which is longer than the time it takes to process a video (30 minutes). However, if an EC2 instance that is processing a video is terminated (due to scale-in actions) before the visibility timeout expires, the message will become visible again in the queue, leading to potential reprocessing failures and ultimately sending the message to the dead-letter queue if it fails to process again.2.Scale-In Protection: By configuring scale-in protection for the instances during processing, the Auto Scaling group will not terminate instances that are currently working on video processing tasks. This ensures that the instances can complete their workload without being prematurely terminated, thus preventing the messages from being sent to the dead-letter queue.3.Operational Efficiency: This solution allows the application to process videos reliably without requiring changes to the visibility timeout or the maxReceiveCount, maintaining the original design intent of the SQS and Auto Scaling configurations.Therefore, implementing scale-in protection directly addresses the issue while optimizing resource utilization and maintaining operational efficiency.
A company has developed APIs that use Amazon API Gateway with Regional endpoints. The APIs call AWS Lambda functions that use API Gateway authentication mechanisms. After a design review, a solutions architect identifies a set of APIs that do not require public access.The solutions architect must design a solution to make the set of APIs accessible only from a VPC. All APIs need to be called with an authenticated userWhich solution will meet these requirements with the LEAST amount of effort?
The optimal solution for making a set of APIs accessible only from a VPC while ensuring that all API calls are authenticated is:C) Update the API endpoint from Regional to private in API Gateway. Create an interface VPC endpoint in the VPC. Create a resource policy, and attach it to the API. Use the VPC endpoint to call the API from the VPC.1.Private API Gateway: By changing the API endpoint type from Regional to private in API Gateway, the APIs become accessible only from within the specified VPC. This ensures that only resources within the VPC can invoke the APIs.2.Interface VPC Endpoint: Creating an interface VPC endpoint for the API Gateway allows the VPC resources to communicate with the API without needing to go over the public internet. This adds a layer of security by keeping the traffic internal.3.Resource Policy: Attaching a resource policy to the API allows for finer-grained access control, specifying which principals (e.g., IAM roles or users) can invoke the API. This ensures that only authenticated users can access the APIs, even when they are restricted to the VPC.4.Least Effort: This solution requires minimal changes and no additional infrastructure compared to other options like creating an ALB or deploying an EC2 instance with an Apache server. It leverages existing services (API Gateway and VPC) and maintains the authentication mechanisms already in place.By implementing this solution, the company can ensure secure access to its APIs while minimizing complexity and maintaining the required authentication protocols.
A weather service provides high-resolution weather maps from a web application hosted on AWS in the eu-west-1 Region. The weather maps are updated frequently and stored in Amazon S3 along with static HTML content. The web application is fronted by Amazon CloudFront.The company recently expanded to serve users in the us-east-1 Region, and these new users report that viewing their respective weather maps is slow from time to time.Which combination of steps will resolve the us-east-1 performance issues? (Choose two.)
Answer(s): B,D
To resolve the performance issues for users in the us-east-1 Region who are experiencing slow access to high-resolution weather maps, the following steps can be taken:B) Create a new S3 bucket in us-east-1. Configure S3 cross-Region replication to synchronize from the S3 bucket in eu-west-1.-By creating an S3 bucket in us-east-1 and setting up cross-Region replication, the company ensures that copies of the frequently updated weather maps are stored closer to the new user base. This minimizes latency since users in the us-east-1 Region will be able to access the data directly from their local bucket rather than fetching it from eu-west-1.D) Use Lambda@Edge to modify requests from North America to use the S3 bucket in us-east-1.-Implementing Lambda@Edge to modify the requests allows the CloudFront distribution to dynamically route requests to the new S3 bucket in us-east-1 when users in North America access the weather maps. This ensures that requests from users in the us-east-1 Region are served from the geographically closer bucket, reducing latency and improving performance.These two steps effectively address the performance issues by leveraging AWS infrastructure to optimize content delivery based on user location while ensuring that data is kept up to date across Regions.
A solutions architect is investigating an issue in which a company cannot establish new sessions in Amazon Workspaces. An initial analysis indicates that the issue involves user profiles. The Amazon Workspaces environment is configured to use Amazon FSx for Windows File Server as the profile share storage. The FSx for Windows File Server file system is configured with 10 TB of storage.The solutions architect discovers that the file system has reached Its maximum capacity. The solutions architect must ensure that users can regain access. The solution also must prevent the problem from occurring again.Which solution will meet these requirements?
Answer(s): B
To address the issue of reaching the maximum capacity of the Amazon FSx for Windows File Server file system that is used for user profiles in Amazon Workspaces, the solutions architect should implement the following steps:B) Increase capacity by using the update-file-system command. Implement an Amazon CloudWatch metric that monitors free space. Use Amazon EventBridge to invoke an AWS Lambda function to increase capacity as required.-Increase Capacity: The immediate action is to increase the storage capacity of the FSx for Windows File Server file system using the update-file-system command. This will provide more space for user profiles and allow users to establish new sessions again.-Monitoring and Automation: Implementing an Amazon CloudWatch metric to monitor the free storage capacity allows the organization to stay informed about the current usage. By setting up an Amazon EventBridge rule that triggers an AWS Lambda function when the available space falls below a specified threshold, the company can automate the process of increasing storage capacity proactively. This prevents similar issues from occurring in the future by ensuring that the file system has enough capacity to accommodate user profiles.This solution effectively resolves the current access issue while also implementing a monitoring and automation strategy to prevent future capacity-related problems.
An international delivery company hosts a delivery management system on AWS. Drivers use the system to upload confirmation of delivery. Confirmation includes the recipient’s signature or a photo of the package with the recipient. The driver’s handheld device uploads signatures and photos through FTP to a single Amazon EC2 instance. Each handheld device saves a file in a directory based on the signed-in user, and the file name matches the delivery number. The EC2 instance then adds metadata to the file after querying a central database to pull delivery information. The file is then placed in Amazon S3 for archiving.As the company expands, drivers report that the system is rejecting connections. The FTP server is having problems because of dropped connections and memory issues in response to these problems, a system engineer schedules a cron task to reboot the EC2 instance every 30 minutes. The billing team reports that files are not always in the archive and that the central system is not always updated.A solutions architect needs to design a solution that maximizes scalability to ensure that the archive always receives the files and that systems are always updated. The handheld devices cannot be modified, so the company cannot deploy a new application.Which solution will meet these requirements?
To address the issues with the delivery management system and ensure scalability, reliability, and efficiency, the following solution is recommended:C) Use AWS Transfer Family to create an FTP server that places the files in Amazon S3. Use an S3 event notification through Amazon Simple Notification Service (Amazon SNS) to invoke an AWS Lambda function. Configure the Lambda function to add the metadata and update the delivery system.1.AWS Transfer Family for FTP: By using AWS Transfer Family, the company can create a fully managed FTP server that scales automatically, eliminating the current issues with dropped connections and memory problems associated with the single EC2 instance. This service can handle multiple concurrent connections, which is crucial as the company expands.2.Storing Files in Amazon S3: Storing the uploaded files directly in Amazon S3 provides a durable and highly available storage solution. This setup ensures that files are archived reliably without the risk of loss due to instance failures.3.S3 Event Notifications: Configuring S3 event notifications to trigger an AWS Lambda function whenever a file is uploaded allows for the automation of metadata processing. The Lambda function can be designed to query the central database for delivery information, add the necessary metadata to the file, and update the delivery system. This removes manual intervention and ensures that the system is always updated with the latest delivery confirmations.This solution meets the requirements for scalability and reliability, while also allowing the existing handheld devices to continue functioning without modification. It addresses the connectivity and file archiving issues effectively.
A company is running an application in the AWS Cloud. The application runs on containers m an Amazon Elastic Container Service (Amazon ECS) cluster. The ECS tasks use the Fargate launch type. The application's data is relational and is stored in Amazon Aurora MySQL. To meet regulatory requirements, the application must be able to recover to a separate AWS Region in the event of an application failure. In case of a failure, no data can be lost.Which solution will meet these requirements with the LEAST amount of operational overhead?
Answer(s): A
To meet the requirements for disaster recovery and ensure no data loss in the event of an application failure, the recommended solution is:A) Provision an Aurora Replica in a different Region.1.Aurora Global Database: Creating an Aurora Replica in a different Region takes advantage of Amazon Aurora's Global Database feature, which allows for low-latency global reads and enables quick recovery from regional failures. This setup allows for automatic replication of data across regions.2.Continuous Replication: Aurora provides continuous, asynchronous replication to the replica in another Region, ensuring that changes made to the primary database are replicated with minimal lag. This feature helps in achieving the regulatory requirement that no data can be lost in case of a failure.3.Minimal Operational Overhead: Setting up an Aurora Replica in another Region is straightforward and requires minimal ongoing management compared to options like AWS DataSync or AWS DMS, which may involve more complex configuration and monitoring.4.Rapid Failover: In the event of a failure, failing over to the Aurora Replica can be done quickly through the AWS Management Console or API, facilitating a smooth transition with minimal downtime.This solution effectively balances the requirements of regulatory compliance with low operational overhead while ensuring high availability and data integrity.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.