A company has an IoT platform that runs in an on-premises environment. The platform consists of a server that connects to IoT devices by using the MQTT protocol. The platform collects telemetry data from the devices at least once every 5 minutes. The platform also stores device metadata in a MongoDB cluster.An application that is installed on an on-premises machine runs periodic jobs to aggregate and transform the telemetry and device metadata. The application creates reports that users view by using another web application that runs on the same on-premises machine. The periodic jobs take 120-600 seconds to run. However, the web application is always running.The company is moving the platform to AWS and must reduce the operational overhead of the stack.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)
Answer(s): B,D,E
-B) Configure the IoT devices to publish to AWS IoT Core: This reduces operational overhead by using AWS IoT Core, a managed service, to securely connect IoT devices to AWS without needing to manage on-premises connections.-D) Write the metadata to Amazon DocumentDB (with MongoDB compatibility): Amazon DocumentDB is a fully managed database service compatible with MongoDB, which eliminates the need to self-manage a MongoDB cluster on-premises, reducing the operational burden.-E) Use AWS Step Functions state machines with AWS Lambda tasks to prepare the reports and to write the reports to Amazon S3. Use Amazon CloudFront with an S3 origin to serve the reports: Step Functions with Lambda provide a serverless architecture for running periodic jobs with minimal management. Using S3 for report storage and CloudFront for content delivery further reduces infrastructure management.This solution leverages AWS managed services to handle tasks, significantly reducing the operational overhead compared to on-premises alternatives.
A global manufacturing company plans to migrate the majority of its applications to AWS. However, the company is concerned about applications that need to remain within a specific country or in the company's central on-premises data center because of data regulatory requirements or requirements for latency of single-digit milliseconds. The company also is concerned about the applications that it hosts in some of its factory sites, where limited network infrastructure exists.The company wants a consistent developer experience so that its developers can build applications once and deploy on premises, in the cloud, or in a hybrid architecture. The developers must be able to use the same tools, APIs, and services that are familiar to them.Which solution will provide a consistent hybrid experience to meet these requirements?
Answer(s): C
-C) Install AWS Outposts for the applications that have data regulatory requirements or requirements for latency of single-digit milliseconds. Use AWS Snowball Edge Compute Optimized devices to host the workloads in the factory sites: AWS Outposts provide a consistent hybrid experience by extending AWS infrastructure, APIs, and tools to the on-premises environment, enabling applications that require low-latency or data residency to remain local. AWS Snowball Edge Compute Optimized devices are designed to operate in environments with limited network connectivity, providing compute and storage capabilities in remote factory sites. This combination ensures consistent tools and developer experience across on-premises, cloud, and hybrid environments.
A company is updating an application that customers use to make online orders. The number of attacks on the application by bad actors has increased recently.The company will host the updated application on an Amazon Elastic Container Service (Amazon ECS) cluster. The company will use Amazon DynamoDB to store application data. A public Application Load Balancer (ALB) will provide end users with access to the application. The company must prevent attacks and ensure business continuity with minimal service interruptions during an ongoing attack.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
Answer(s): A,E
-A) Create an Amazon CloudFront distribution with the ALB as the origin. Add a custom header and random value on the CloudFront domain. Configure the ALB to conditionally forward traffic if the header and value match: CloudFront provides a cost-effective layer of protection against attacks by distributing and caching content globally, reducing the load on the ALB. The custom header and value add an additional layer of security, ensuring only legitimate requests reach the application.-E) Deploy an AWS WAF web ACL that includes an appropriate rule group. Associate the web ACL with the Amazon CloudFront distribution: AWS WAF (Web Application Firewall) helps prevent attacks by filtering malicious traffic before it reaches the application, adding security at the edge. Associating the WAF with CloudFront provides cost-effective protection and helps minimize service interruptions during attacks.These steps leverage managed AWS services to secure the application and ensure business continuity while minimizing costs.
A company runs a web application on AWS. The web application delivers static content from an Amazon S3 bucket that is behind an Amazon CloudFront distribution. The application serves dynamic content by using an Application Load Balancer (ALB) that distributes requests to a fleet of Amazon EC2 instances in Auto Scaling groups. The application uses a domain name setup in Amazon Route 53.Some users reported occasional issues when the users attempted to access the website during peak hours. An operations team found that the ALB sometimes returned HTTP 503 Service Unavailable errors. The company wants to display a custom error message page when these errors occur. The page should be displayed immediately for this error code.Which solution will meet these requirements with the LEAST operational overhead?
-C) Create a CloudFront origin group that has two origins. Set the ALB endpoint as the primary origin. For the secondary origin, set an S3 bucket that is configured to host a static website. Set up origin failover for the CloudFront distribution. Update the S3 static website to incorporate the custom error page: This solution uses CloudFront’s built-in origin failover functionality, which provides minimal operational overhead. If the ALB returns a 503 error, CloudFront automatically serves the custom error page from the S3 static website, ensuring users immediately see the error page. It’s a simple, managed solution without the need to configure complex health checks or multiple distributions.
A company is planning to migrate an application to AWS. The application runs as a Docker container and uses an NFS version 4 file share.A solutions architect must design a secure and scalable containerized solution that does not require provisioning or management of the underlying infrastructure.Which solution will meet these requirements?
Answer(s): A
-A) Deploy the application containers by using Amazon Elastic Container Service (Amazon ECS) with the Fargate launch type. Use Amazon Elastic File System (Amazon EFS) for shared storage. Reference the EFS file system ID, container mount point, and EFS authorization IAM role in the ECS task definition: This solution meets the requirement of using Docker containers without managing the underlying infrastructure. ECS with Fargate is a serverless option for container orchestration, eliminating the need to manage servers. EFS provides scalable, shared storage that supports NFS version 4, which is perfect for containerized applications needing shared file storage. This approach is secure, scalable, and minimizes operational overhead.
A company is running an application in the AWS Cloud. The core business logic is running on a set of Amazon EC2 instances in an Auto Scaling group. An Application Load Balancer (ALB) distributes traffic to the EC2 instances. Amazon Route 53 record api.example.com is pointing to the ALB.The company's development team makes major updates to the business logic. The company has a rule that when changes are deployed, only 10% of customers can receive the new logic during a testing window. A customer must use the same version of the business logic during the testing window.How should the company deploy the updates to meet these requirements?
Answer(s): B
-B) Create a second target group that is referenced by the ALB. Deploy the new logic to EC2 instances in this new target group. Update the ALB listener rule to use weighted target groups. Configure ALB target group stickiness: This solution allows the company to route a specific percentage of traffic (10%) to the new version of the business logic by using weighted target groups in the ALB listener. Configuring stickiness ensures that the same customer consistently gets routed to the same version during the testing window. This meets the requirement of consistent customer experience with minimal operational complexity.
A large education company recently introduced Amazon Workspaces to provide access to internal applications across multiple universities. The company is storing user profiles on an Amazon FSx for Windows File Server file system. The file system is configured with a DNS alias and is connected to a self-managed Active Directory. As more users begin to use the Workspaces, login time increases to unacceptable levels.An investigation reveals a degradation in performance of the file system. The company created the file system on HDD storage with a throughput of 16 MBps. A solutions architect must improve the performance of the file system during a defined maintenance window.What should the solutions architect do to meet these requirements with the LEAST administrative effort?
-A) Use AWS Backup to create a point-in-time backup of the file system. Restore the backup to a new FSx for Windows File Server file system. Select SSD as the storage type. Select 32 MBps as the throughput capacity. When the backup and restore process is completed, adjust the DNS alias accordingly. Delete the original file system: This approach allows for an easy transition with minimal downtime and the least administrative effort. AWS Backup simplifies the backup and restore process, and by creating a new file system with SSD storage and higher throughput, performance issues are addressed. Updating the DNS alias ensures that users are seamlessly directed to the new, optimized file system once the process is complete. This solution avoids manual data migration while improving performance.
A company hosts an application on AWS. The application reads and writes objects that are stored in a single Amazon S3 bucket. The company must modify the application to deploy the application in two AWS Regions.Which solution will meet these requirements with the LEAST operational overhead?
-B) Create a new S3 bucket in a second Region. Set up bidirectional S3 Cross-Region Replication (CRR) between the original S3 bucket and the new S3 bucket. Configure an S3 Multi-Region Access Point that uses both S3 buckets. Deploy a modified application to both Regions: This solution provides a highly available, multi-region setup with minimal operational overhead. S3 Cross-Region Replication ensures data consistency between the two regions, and the Multi-Region Access Point allows the application to access the data from the closest region automatically. This solution is efficient and scalable, reducing the complexity of managing data access across multiple regions.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.