A company has set up its entire infrastructure on AWS. The company uses Amazon EC2 instances to host its ecommerce website and uses Amazon S3 to store static data. Three engineers at the company handle the cloud administration and development through one AWS account. Occasionally, an engineer alters an EC2 security group configuration of another engineer and causes noncompliance issues in the environment.A solutions architect must set up a system that tracks changes that the engineers make. The system must send alerts when the engineers make noncompliant changes to the security settings for the EC2 instances.What is the FASTEST way for the solutions architect to meet these requirements?
Answer(s): D
D: Enabling AWS Config on the EC2 security groups allows tracking of any changes and automatically checks for compliance against predefined rules. AWS Config can send notifications via Amazon SNS when noncompliant changes are detected, providing the fastest and most efficient way to meet the requirement of tracking and alerting on noncompliant changes.
A company has IoT sensors that monitor traffic patterns throughout a large city. The company wants to read and collect data from the sensors and perform aggregations on the data.A solutions architect designs a solution in which the IoT devices are streaming to Amazon Kinesis Data Streams. Several applications are reading from the stream. However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.Which actions should the solutions architect take to resolve this issue? (Choose three.)
Answer(s): A,C,E
-A) Resharding the stream increases the number of shards, allowing more throughput and reducing throttling by distributing the data across more shards.-C) Using the enhanced fan-out feature allows each consumer to have a dedicated 2 MBps throughput, reducing contention and throttling among consumers.-E) Implementing error retry and exponential backoff in the consumer logic helps handle temporary throttling issues by retrying with increasing delays, improving the chances of successful reads.These actions help resolve the throttling issue and the ReadProvisionedThroughputExceeded error by optimizing stream consumption and throughput.
A company uses AWS Organizations to manage its AWS accounts. The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage. The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?
Answer(s): B
B) Using AWS Cost Explorer provides built-in resource optimization recommendations for EC2 instances, including downsizing suggestions for underutilized resources. Installing the Amazon CloudWatch agent via AWS Systems Manager enables resource usage monitoring for CPU and memory. Retrieving recommendations from Cost Explorer in the organization's management account allows central management across all accounts, making this the most efficient and low-effort solution.
A company wants to run a custom network analysis software package to inspect traffic as traffic leaves and enters a VPC. The company has deployed the solution by using AWS CloudFormation on three Amazon EC2 instances in an Auto Scaling group. All network routing has been established to direct traffic to the EC2 instances.Whenever the analysis software stops working, the Auto Scaling group replaces an instance. The network routes are not updated when the instance replacement occurs.Which combination of steps will resolve this issue? (Choose three.)
Answer(s): B,D,E
B) Installing the Amazon CloudWatch agent enables monitoring of the custom software's process metrics, allowing detection of failures.D) Creating a CloudWatch alarm for failure scenarios ensures that any issue with the software is detected promptly. The alarm can send a notification to an SNS topic, which triggers further actions.E) An AWS Lambda function can respond to the SNS notification, taking the failed instance out of service and updating the network routes to point to the new instance, ensuring traffic flows through the replacement instance.This combination ensures automatic monitoring, detection of software failures, and proper rerouting of network traffic to the new instance.
A company is developing a new on-demand video application that is based on microservices. The application will have 5 million users at launch and will have 30 million users after 6 months. The company has deployed the application on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate. The company developed the application by using ECS services that use the HTTPS protocol.A solutions architect needs to implement updates to the application by using blue/green deployments. The solution must distribute traffic to each ECS service through a load balancer. The application must automatically adjust the number of tasks in response to an Amazon CloudWatch alarm.Which solution will meet these requirements?
D) Configuring ECS services to use the blue/green deployment type and an Application Load Balancer ensures that traffic is distributed correctly and allows seamless updates during deployments. Using Service Auto Scaling for each ECS service ensures that the application automatically adjusts the number of tasks in response to demand, based on the CloudWatch alarm. This solution provides both the required deployment method and scalability to meet the growing user demand.
A company is running a containerized application in the AWS Cloud. The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group.The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images. When a new image version is uploaded, the new image version receives a unique tag.The company needs a solution that inspects new image versions for common vulnerabilities and exposures. The solution must automatically delete new image tags that have Critical or High severity findings. The solution also must notify the development team when such a deletion occurs.Which solution meets these requirements?
Answer(s): A
A) Configuring scan on push in the Amazon ECR repository ensures that new images are scanned for vulnerabilities immediately after they are uploaded. Using Amazon EventBridge to invoke an AWS Step Functions state machine allows automated workflows to handle the deletion of image tags with Critical or High severity findings and notify the development team via Amazon SNS. This solution is efficient and meets the requirements for automated scanning, deletion, and notifications.
A company runs many workloads on AWS and uses AWS Organizations to manage its accounts. The workloads are hosted on Amazon EC2. AWS Fargate. and AWS Lambda. Some of the workloads have unpredictable demand. Accounts record high usage in some months and low usage in other months.The company wants to optimize its compute costs over the next 3 years. A solutions architect obtains a 6-month average for each of the accounts across the organization to calculate usage.Which solution will provide the MOST cost savings for all the organization's compute usage?
B) Purchasing a Compute Savings Plan at the organization level through the management account provides the most flexibility and cost savings across all the organization's compute resources, including EC2, Fargate, and Lambda. This option applies savings across various services and accounts, maximizing cost savings even with unpredictable demand. By using the recommendation at the management account level, the solution is tailored to the organization's actual usage, providing optimal savings for the next 3 years.
A company has hundreds of AWS accounts. The company uses an organization in AWS Organizations to manage all the accounts. The company has turned on all features.A finance team has allocated a daily budget for AWS costs. The finance team must receive an email notification if the organization's AWS costs exceed 80% of the allocated budget. A solutions architect needs to implement a solution to track the costs and deliver the notifications.Which solution will meet these requirements?
A) Using AWS Budgets in the organization's management account allows tracking of daily AWS costs across all accounts. Setting an alert threshold of 80% and configuring notifications through Amazon SNS ensures that the finance team is notified when the budget is nearing its limit. This solution is simple, effective, and tailored to monitor costs across the organization, meeting the requirement for daily notifications without complex configurations.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.