A company wants to migrate to AWS. The company is running thousands of VMs in a VMware ESXi environment. The company has no configuration management database and has little knowledge about the utilization of the VMware portfolio.A solutions architect must provide the company with an accurate inventory so that the company can plan for a cost-effective migration.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): C
C: Deploying the Migration Evaluator agentless collector to the ESXi hypervisor provides an automated and low-overhead way to gather inventory and utilization data without needing to install agents on each VM. This method allows for efficient data collection and analysis of the VMware environment. Reviewing the collected data helps identify inactive or underutilized servers for cost-effective migration planning, making this solution the most efficient with minimal operational overhead.
A company runs a microservice as an AWS Lambda function. The microservice writes data to an on-premises SQL database that supports a limited number of concurrent connections. When the number of Lambda function invocations is too high, the database crashes and causes application downtime. The company has an AWS Direct Connect connection between the company's VPC and the on-premises data center. The company wants to protect the database from crashes.Which solution will meet these requirements?
Answer(s): A
A: Writing data to Amazon SQS and setting a reserved concurrency limit on the Lambda function prevents overloading the database by controlling the number of simultaneous database connections. The queue buffers incoming data and allows the Lambda function to process it at a rate that the database can handle, preventing crashes and downtime, while also using AWS's managed service features efficiently.
A company uses a Grafana data visualization solution that runs on a single Amazon EC2 instance to monitor the health of the company's AWS workloads. The company has invested time and effort to create dashboards that the company wants to preserve. The dashboards need to be highly available and cannot be down for longer than 10 minutes. The company needs to minimize ongoing maintenance.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): B
B: Using Amazon Managed Grafana minimizes operational overhead as it is a fully managed service. It ensures high availability and provides seamless integration with AWS data sources like CloudWatch. By exporting and importing the existing dashboards, the company can preserve its investment in creating them, and Managed Grafana will handle maintenance and scaling, meeting the requirement of less than 10 minutes of downtime.
A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year.Which solution will meet these requirements with the LEAST operational overhead?
B: Migrating the database to Amazon RDS for Oracle and using AWS Secrets Manager with automatic password rotation provides the least operational overhead. Secrets Manager handles secure storage and rotation of database credentials, and configuring a yearly rotation schedule meets the security requirement without manual intervention, making this solution both secure and low-maintenance.
A solutions architect is designing an AWS account structure for a company that consists of multiple teams. All the teams will work in the same AWS Region. The company needs a VPC that is connected to the on-premises network. The company expects less than 50 Mbps of total traffic to and from the on-premises network.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
Answer(s): B,D
-B: Creating a VPC in a shared services account and sharing subnets using AWS Resource Access Manager is cost-effective and allows multiple teams to use the same VPC resources without duplicating infrastructure.-D: Using AWS Site-to-Site VPN provides a cost-effective solution for the expected low traffic (less than 50 Mbps) to and from the on-premises network, compared to more expensive options like Direct Connect.This combination provides the required connectivity and resource sharing with minimal cost and overhead.
A solutions architect at a large company needs to set up network security for outbound traffic to the internet from all AWS accounts within an organization in AWS Organizations. The organization has more than 100 AWS accounts, and the accounts route to each other by using a centralized AWS Transit Gateway. Each account has both an internet gateway and a NAT gateway for outbound traffic to the internet. The company deploys resources only into a single AWS Region.The company needs the ability to add centrally managed rule-based filtering on all outbound traffic to the internet for all AWS accounts in the organization. The peak load of outbound traffic will not exceed 25 Gbps in each Availability Zone.Which solution meets these requirements?
B: Using AWS Network Firewall in a centralized VPC connected to the existing transit gateway is the most scalable and cost-effective solution for centrally managing outbound traffic filtering for over 100 AWS accounts. This setup provides rule-based filtering across all Availability Zones and requires modifying the default routes to point to Network Firewall endpoints. This solution supports the required 25 Gbps peak traffic per Availability Zone while minimizing operational complexity compared to deploying firewalls or proxies in each individual account.
A company uses a load balancer to distribute traffic to Amazon EC2 instances in a single Availability Zone. The company is concerned about security and wants a solutions architect to re-architect the solution to meet the following requirements:•Inbound requests must be filtered for common vulnerability attacks.•Rejected requests must be sent to a third-party auditing application.•All resources should be highly available.Which solution meets these requirements?
Answer(s): D
D: This solution meets all the requirements. It sets up a Multi-AZ Auto Scaling group to ensure high availability, uses an Application Load Balancer (ALB) to distribute traffic, and integrates AWS WAF for filtering inbound traffic against common vulnerabilities. AWS WAF is configured with a web ACL and logging is enabled via Amazon Kinesis Data Firehose, which sends rejected requests to the third-party auditing application. Additionally, subscribing to AWS Managed Rules provides enhanced security against known vulnerabilities.This ensures security, auditing, and high availability while minimizing operational complexity.
A company is running an application in the AWS Cloud. The application consists of microservices that run on a fleet of Amazon EC2 instances in multiple Availability Zones behind an Application Load Balancer. The company recently added a new REST API that was implemented in Amazon API Gateway. Some of the older microservices that run on EC2 instances need to call this new API.The company does not want the API to be accessible from the public internet and does not want proprietary data to traverse the public internet.What should a solutions architect do to meet these requirements?
B: Creating an interface VPC endpoint for API Gateway and setting a private endpoint ensures that the API is accessible only from within the VPC and does not traverse the public internet. By applying an endpoint policy and a resource policy, access can be restricted to specific microservices running in the VPC. This solution securely meets the requirement of keeping the API private and ensuring that proprietary data does not traverse the public internet.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.