A company is planning a one-time migration of an on-premises MySQL database to Amazon Aurora MySQL in the us-east-1 Region. The company's current internet connection has limited bandwidth. The on-premises MySQL database is 60 TB in size. The company estimates that it will take a month to transfer the data to AWS over the current internet connection. The company needs a migration solution that will migrate the database more quickly.Which solution will migrate the database in the LEAST amount of time?
Answer(s): C
-C) Order an AWS Snowball Edge device. Load the data into an Amazon S3 bucket by using the S3 interface. Use AWS Database Migration Service (AWS DMS) to migrate the data from Amazon S3 to Aurora MySQL: This solution leverages AWS Snowball Edge, which is ideal for large-scale data transfers, especially when bandwidth is limited. Snowball allows for secure, fast data transfer to AWS by physically shipping the device. Once the data is transferred to S3, AWS DMS can handle the migration from S3 to Aurora MySQL. This approach significantly reduces migration time compared to transferring over a slow internet connection.This solution minimizes migration time while addressing the bandwidth constraint.
A company has an application in the AWS Cloud. The application runs on a fleet of 20 Amazon EC2 instances. The EC2 instances are persistent and store data on multiple attached Amazon Elastic Block Store (Amazon EBS) volumes.The company must maintain backups in a separate AWS Region. The company must be able to recover the EC2 instances and their configuration within 1 business day, with loss of no more than 1 day's worth of data. The company has limited staff and needs a backup solution that optimizes operational efficiency and cost. The company already has created an AWS CloudFormation template that can deploy the required network configuration in a secondary Region.Which solution will meet these requirements?
-C) Use AWS Backup to create a scheduled daily backup plan for the EC2 instances. Configure the backup task to copy the backups to a vault in the secondary Region. In the event of a failure, launch the CloudFormation template, restore the instance volumes and configurations from the backup vault, and transfer usage to the secondary Region: AWS Backup is a fully managed service that simplifies and automates backup tasks. It supports creating backups of EBS volumes and copying them across regions, meeting the requirement to maintain backups in a separate region. It also reduces operational overhead by automating backup and recovery tasks, making it suitable for limited staff. This solution meets the requirement for 1-day RPO and RTO, allowing efficient recovery in the event of a disaster.This solution optimizes cost and operational efficiency while ensuring the recovery of EC2 instances and their configurations.
A company is designing a new website that hosts static content. The website will give users the ability to upload and download large files. According to company requirements, all data must be encrypted in transit and at rest. A solutions architect is building the solution by using Amazon S3 and Amazon CloudFront.Which combination of steps will meet the encryption requirements? (Choose three.)
Answer(s): A,C,E
-A: Turning on S3 server-side encryption ensures that data is encrypted at rest.-C: A bucket policy denying unencrypted operations ensures that all data is encrypted during storage.-E: Redirecting HTTP requests to HTTPS in CloudFront ensures encryption in transit.This combination meets the encryption requirements for both in-transit and at-rest data.
A company is implementing a serverless architecture by using AWS Lambda functions that need to access a Microsoft SQL Server DB instance on Amazon RDS. The company has separate environments for development and production, including a clone of the database system.The company's developers are allowed to access the credentials for the development database. However, the credentials for the production database must be encrypted with a key that only members of the IT security team's IAM user group can access. This key must be rotated on a regular basis.What should a solutions architect do in the production environment to meet these requirements?
Answer(s): D
D: Storing database credentials in AWS Secrets Manager ensures secure management of secrets with automatic rotation. Associating the secret with a KMS customer managed key allows for fine-grained access control, ensuring that only the IT security team can access the secret and the key. This setup meets the requirements for secure credential management and key rotation, making it ideal for production environments.
An online retail company is migrating its legacy on-premises .NET application to AWS. The application runs on load-balanced frontend web servers, load-balanced application servers, and a Microsoft SQL Server database.The company wants to use AWS managed services where possible and does not want to rewrite the application. A solutions architect needs to implement a solution to resolve scaling issues and minimize licensing costs as the application scales.Which solution will meet these requirements MOST cost-effectively?
Answer(s): A
A: Deploying EC2 instances in an Auto Scaling group behind an Application Load Balancer for both the web and application tiers ensures scalability. Amazon Aurora PostgreSQL with Babelfish allows the company to replatform the SQL Server database without rewriting the application, minimizing licensing costs and improving scalability, making this the most cost-effective solution.
A software-as-a-service (SaaS) provider exposes APIs through an Application Load Balancer (ALB). The ALB connects to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that is deployed in the us-east-1 Region. The exposed APIs contain usage of a few non-standard REST methods: LINK, UNLINK, LOCK, and UNLOCK.Users outside the United States are reporting long and inconsistent response times for these APIs. A solutions architect needs to resolve this problem with a solution that minimizes operational overhead.Which solution meets these requirements?
C: Adding an accelerator in AWS Global Accelerator reduces latency by routing user traffic to the optimal AWS edge location and then to the ALB. It improves performance for global users by providing faster and more consistent response times without requiring complex regional deployments or significant operational overhead.
A company runs an IoT application in the AWS Cloud. The company has millions of sensors that collect data from houses in the United States. The sensors use the MQTT protocol to connect and send data to a custom MQTT broker. The MQTT broker stores the data on a single Amazon EC2 instance. The sensors connect to the broker through the domain named iot.example.com. The company uses Amazon Route 53 as its DNS service. The company stores the data in Amazon DynamoDB.On several occasions, the amount of data has overloaded the MQTT broker and has resulted in lost sensor data. The company must improve the reliability of the solution.Which solution will meet these requirements?
Answer(s): B
B: AWS IoT Core is a managed service designed to handle a massive scale of IoT data with the MQTT protocol. By setting up AWS IoT Core, you can eliminate the need to manage a custom MQTT broker on EC2. Updating Route 53 to point to AWS IoT Core ensures reliable, scalable handling of sensor data. Additionally, AWS IoT Core rules can be configured to store the data directly in DynamoDB, improving both reliability and scalability without operational overhead.
A company has Linux-based Amazon EC2 instances. Users must access the instances by using SSH with EC2 SSH key pairs. Each machine requires a unique EC2 key pair.The company wants to implement a key rotation policy that will, upon request, automatically rotate all the EC2 key pairs and keep the keys in a securely encrypted place. The company will accept less than 1 minute of downtime during key rotation.Which solution will meet these requirements?
A: Storing the EC2 key pairs in AWS Secrets Manager allows secure management and rotation of the keys. A rotation schedule can invoke an AWS Lambda function to generate new key pairs, replace the public keys on EC2 instances, and update the private keys in Secrets Manager. This ensures secure key rotation with minimal downtime and meets the requirement for keeping the keys encrypted and easily accessible.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.