A company uses an AWS CodeCommit repository. The company must store a backup copy of the data that is in the repository in a second AWS Region.Which solution will meet these requirements?
Answer(s): C
C) Create an Amazon EventBridge rule to invoke AWS CodeBuild when the company pushes code to the repository. Use CodeBuild to clone the repository. Create a .zip file of the content. Copy the file to an S3 bucket in the second Region.-This solution allows for real-time backups of the CodeCommit repository. By setting up an EventBridge rule, you can automatically trigger a CodeBuild project to clone the repository and package it into a zip file whenever code is pushed. Then, you can copy this zip file to an S3 bucket in the second AWS Region for backup.This approach effectively ensures that you have a backup of the repository in a different region, leveraging AWS services for automation and efficient handling of the data.
A company has multiple business units that each have separate accounts on AWS. Each business unit manages its own network with several VPCs that have CIDR ranges that overlap. The company’s marketing team has created a new internal application and wants to make the application accessible to all the other business units. The solution must use private IP addresses only.Which solution will meet these requirements with the LEAST operational overhead?
C) Create an AWS PrivateLink endpoint service to share the marketing application. Grant permission to specific AWS accounts to connect to the service. Create interface VPC endpoints in other accounts to access the application by using private IP addresses.-This solution uses AWS PrivateLink to securely connect VPCs across different accounts without exposing the application to the public internet. By creating an endpoint service in the marketing team's VPC and allowing specific business units to connect to it, you ensure that only authorized accounts have access to the internal application while maintaining private IP address usage. This method provides a seamless integration with minimal operational overhead, as it abstracts the complexity of VPC peering and overlapping CIDR ranges.
A company needs to audit the security posture of a newly acquired AWS account. The company’s data security team requires a notification only when an Amazon S3 bucket becomes publicly exposed. The company has already established an Amazon Simple Notification Service (Amazon SNS) topic that has the data security team's email address subscribed.Which solution will meet these requirements?
Answer(s): B
B) Create an analyzer in AWS Identity and Access Management Access Analyzer. Create an Amazon EventBridge rule for the event type “Access Analyzer Finding” with a filter for “isPublic: true.” Select the SNS topic as the EventBridge rule target.-This solution effectively audits the security posture of S3 buckets by using AWS IAM Access Analyzer, which can identify public access configurations. When a bucket is found to be publicly accessible, Access Analyzer generates an event that can be captured by EventBridge. By setting up an EventBridge rule that listens for these specific findings (where isPublic is true) and directing notifications to the established SNS topic, you ensure that the data security team receives timely alerts about any public exposure of S3 buckets. This approach directly addresses the requirement for notifications on public exposure while leveraging AWS services efficiently.
A solutions architect needs to assess a newly acquired company’s portfolio of applications and databases. The solutions architect must create a business case to migrate the portfolio to AWS. The newly acquired company runs applications in an on-premises data center. The data center is not well documented. The solutions architect cannot immediately determine how many applications and databases exist. Traffic for the applications is variable. Some applications are batch processes that run at the end of each month.The solutions architect must gain a better understanding of the portfolio before a migration to AWS can begin.Which solution will meet these requirements?
C) Use Migration Evaluator to generate a list of servers. Build a report for a business case. Use AWS Migration Hub to view the portfolio. Use AWS Application Discovery Service to gain an understanding of application dependencies.-This solution leverages Migration Evaluator, which provides insights into the existing server portfolio and helps in assessing the potential for migration to AWS. By using AWS Migration Hub, you can track and manage the migration process while gaining visibility into your applications and databases. Additionally, AWS Application Discovery Service assists in identifying application dependencies and resource utilization, which is crucial for planning a successful migration. This combination provides a comprehensive understanding of the portfolio and enables the creation of a solid business case for migration.
A company has an application that runs as a ReplicaSet of multiple pods in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster has nodes in multiple Availability Zones. The application generates many small files that must be accessible across all running instances of the application. The company needs to back up the files and retain the backups for 1 year.Which solution will meet these requirements while providing the FASTEST storage performance?
Answer(s): A
A) Create an Amazon Elastic File System (Amazon EFS) file system and a mount target for each subnet that contains nodes in the EKS cluster. Configure the ReplicaSet to mount the file system. Direct the application to store files in the file system. Configure AWS Backup to back up and retain copies of the data for 1 year.-Amazon EFS provides a managed, scalable file storage solution that can be mounted across multiple EC2 instances and Kubernetes pods, making it suitable for scenarios where multiple pods need access to shared files. It is designed for high availability and durability, which aligns with the requirement to retain backups for 1 year. Additionally, EFS offers fast storage performance, making it ideal for applications that generate many small files. By integrating with AWS Backup, you can easily manage the backup and retention policies for the stored data.
A company runs a customer service center that accepts calls and automatically sends all customers a managed, interactive, two-way experience survey by text message. The applications that support the customer service center run on machines that the company hosts in an on-premises data center. The hardware that the company uses is old, and the company is experiencing downtime with the system. The company wants to migrate the system to AWS to improve reliability.Which solution will meet these requirements with the LEAST ongoing operational overhead?
A) Use Amazon Connect to replace the old call center hardware. Use Amazon Pinpoint to send text message surveys to customers.-Amazon Connect is a cloud-based contact center service that allows businesses to set up a customer service center without the need for traditional hardware, providing a more reliable and scalable solution. It simplifies call management and offers features tailored for customer service.-Amazon Pinpoint is an effective service for managing communication with customers, including sending interactive, two-way text message surveys. This combination minimizes the operational overhead by leveraging managed services that are designed to work seamlessly together, reducing the need for manual infrastructure management and support.
A company is building a call center by using Amazon Connect. The company’s operations team is defining a disaster recovery (DR) strategy across AWS Regions. The contact center has dozens of contact flows, hundreds of users, and dozens of claimed phone numbers.Which solution will provide DR with the LOWEST RTO?
Answer(s): D
D) Provision a new Amazon Connect instance with all existing users and contact flows in a second Region. Create an Amazon Route 53 health check for the URL of the Amazon Connect instance. Create an Amazon CloudWatch alarm for failed health checks. Create an AWS Lambda function to deploy an AWS CloudFormation template that provisions claimed phone numbers. Configure the alarm to invoke the Lambda function.-This solution provides the lowest RTO because it involves proactively provisioning a backup Amazon Connect instance with all necessary configurations (users and contact flows) in advance.-By setting up Route 53 health checks and CloudWatch alarms, the system can automatically monitor the primary instance's availability. If the primary instance becomes unavailable, the Lambda function can quickly deploy the necessary claimed phone numbers through a CloudFormation template, facilitating a rapid failover to the backup instance.-This approach minimizes downtime and ensures continuity of service in the event of a failure, meeting the disaster recovery requirements effectively.
A company runs an application on AWS. The company curates data from several different sources. The company uses proprietary algorithms to perform data transformations and aggregations. After the company performs ETL processes, the company stores the results in Amazon Redshift tables. The company sells this data to other companies. The company downloads the data as files from the Amazon Redshift tables and transmits the files to several data customers by using FTP. The number of data customers has grown significantly. Management of the data customers has become difficult.The company will use AWS Data Exchange to create a data product that the company can use to share data with customers. The company wants to confirm the identities of the customers before the company shares data. The customers also need access to the most recent data when the company publishes the data.Which solution will meet these requirements with the LEAST operational overhead?
The selected solution is B because it effectively utilizes AWS Data Exchange to create a streamlined and secure way to share data with customers while meeting the company's requirements.1.Data Exchange Integration: AWS Data Exchange allows the company to create a datashare that connects directly to the Amazon Redshift cluster. This enables the company to share data products efficiently with multiple customers.2.Subscription Verification: By configuring subscription verification, the company can confirm the identities of customers before granting access to the data. This ensures that only authorized customers receive the data.3.Real-Time Access: Customers will have access to the most recent data as it is stored in Amazon Redshift. The integration with AWS Data Exchange simplifies the process of publishing updates, allowing customers to receive timely data without the complexity of manual file transfers.Overall, this solution minimizes operational overhead by leveraging managed services and automating customer access, making it the most efficient choice for the company's needs.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.