A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are part of an Auto Scaling group. The application has unpredictable workloads and frequently scales out and in. The company’s development team wants to analyze application logs to find ways to improve the application's performance. However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?
Answer(s): B
B) Configuring the EC2 instances to publish logs to Amazon CloudWatch Logs using the unified CloudWatch agent ensures that application logs are available even after instances are terminated due to scaling events. This solution allows the development team to view and analyze logs regardless of the lifecycle of the EC2 instances, providing persistent log storage and easy access to historical logs for performance analysis.
A company runs an unauthenticated static website (www.example.com) that includes a registration form for users. The website uses Amazon S3 for hosting and uses Amazon CloudFront as the content delivery network with AWS WAF configured. When the registration form is submitted, the website calls an Amazon API Gateway API endpoint that invokes an AWS Lambda function to process the payload and forward the payload to an external API call.During testing, a solutions architect encounters a cross-origin resource sharing (CORS) error. The solutions architect confirms that the CloudFront distribution origin has the Access-Control-Allow-Origin header set to www.example.com.What should the solutions architect do to resolve the error?
Answer(s): C
C) The CORS (Cross-Origin Resource Sharing) error occurs when the API Gateway endpoint does not include the appropriate Access-Control-Allow-Origin header in its response. To resolve the error, the solutions architect should enable CORS on the API Gateway API endpoint and configure the endpoint to return responses with the Access-Control-Allow-Origin header set to www.example.com. This will allow the website hosted on S3 to make requests to the API without running into CORS issues.
A company has many separate AWS accounts and uses no central billing or management. Each AWS account hosts services for different departments in the company. The company has a Microsoft Azure Active Directory that is deployed.A solutions architect needs to centralize billing and management of the company’s AWS accounts. The company wants to start using identity federation instead of manual user management. The company also wants to use temporary credentials instead of long-lived access keys.Which combination of steps will meet these requirements? (Choose three.)
Answer(s): A,C,E
A) Creating a new AWS account to serve as a management account and deploying an organization in AWS Organizations allows for centralized billing and management. Inviting each existing AWS account to join the organization ensures that all accounts are managed from a central point.C) Deploying AWS IAM Identity Center (AWS Single Sign-On) in the management account and connecting it to Azure Active Directory allows the company to use identity federation, which eliminates the need for manual user management. Automatic synchronization of users and groups further simplifies management.E) Creating IAM Identity Center permission sets and attaching them to the appropriate groups and AWS accounts provides role-based access control, ensuring that temporary credentials are used instead of long-lived access keys, meeting the security requirement.This combination ensures centralized billing, identity federation, and temporary credentials across all AWS accounts.
A company wants to manage the costs associated with a group of 20 applications that are infrequently used, but are still business-critical, by migrating to AWS. The applications are a mix of Java and Node.js spread across different instance clusters. The company wants to minimize costs while standardizing by using a single deployment methodology.Most of the applications are part of month-end processing routines with a small number of concurrent users, but they are occasionally run at other times. Average application memory consumption is less than 1 GB. though some applications use as much as 2.5 GB of memory during peak processing. The most important application in the group is a billing report written in Java that accesses multiple data sources and often runs for several hours.Which is the MOST cost-effective solution?
B) Deploying Amazon ECS containers on EC2 with Auto Scaling configured for memory utilization ensures cost-effective resource allocation by scaling based on actual demand. Each application can run as an individual ECS task, allowing efficient management of resources based on the varying memory consumption requirements. This approach provides a standardized deployment methodology for Java and Node.js applications while minimizing costs. CloudWatch can monitor services and memory utilization to ensure that resources are appropriately scaled, meeting the business-critical nature of the applications.
A solutions architect needs to review the design of an Amazon EMR cluster that is using the EMR File System (EMRFS). The cluster performs tasks that are critical to business needs. The cluster is running Amazon EC2 On-Demand Instances at all times for all task, primary, and core nodes. The EMR tasks run each morning, starting at 1:00 AM. and take 6 hours to finish running. The amount of time to complete the processing is not a priority because the data is not referenced until late in the day.The solutions architect must review the architecture and suggest a solution to minimize the compute costs.Which solution should the solutions architect recommend to meet these requirements?
C) Continuing to use On-Demand Instances for all nodes ensures reliability for the business-critical EMR tasks. Terminating the cluster when processing is complete further optimizes cost, as resources are only used when necessary. Purchasing Compute Savings Plans for the On-Demand Instance usage will provide long-term cost savings while maintaining the same architecture, meeting both the reliability and cost-efficiency requirements. This option minimizes compute costs without compromising the stability of the workload.
A company has migrated a legacy application to the AWS Cloud. The application runs on three Amazon EC2 instances that are spread across three Availability Zones. One EC2 instance is in each Availability Zone. The EC2 instances are running in three private subnets of the VPC and are set up as targets for an Application Load Balancer (ALB) that is associated with three public subnets.The application needs to communicate with on-premises systems. Only traffic from IP addresses in the company's IP address range are allowed to access the on-premises systems. The company’s security team is bringing only one IP address from its internal IP address range to the cloud. The company has added this IP address to the allow list for the company firewall. The company also has created an Elastic IP address for this IP address.A solutions architect needs to create a solution that gives the application the ability to communicate with the on-premises systems. The solution also must be able to mitigate failures automatically.Which solution will meet these requirements?
C) Deploying a single NAT gateway with the Elastic IP address in a public subnet allows traffic from the private EC2 instances to communicate with on-premises systems. Using Amazon CloudWatch to monitor the NAT gateway's health ensures that failures are detected. If the NAT gateway becomes unhealthy, an AWS Lambda function can automatically create a new NAT gateway in a different subnet and reassign the Elastic IP address, ensuring high availability and mitigating failures without manual intervention. This solution meets the requirement for fault tolerance and automatic failover.
A company uses AWS Organizations to manage more than 1,000 AWS accounts. The company has created a new developer organization. There are 540 developer member accounts that must be moved to the new developer organization. All accounts are set up with all the required information so that each account can be operated as a standalone account.Which combination of steps should a solutions architect take to move all of the developer accounts to the new developer organization? (Choose three.)
Answer(s): B,E,F
B) To move the developer accounts to the new developer organization, the accounts need to be removed from the old organization. This can be done by using the RemoveAccountFromOrganization operation in the old organization's management account.E) The new organization’s management account must send invitations to the developer accounts to join the new organization. This can be done using the InviteAccountToOrganization operation.F) After the invitations are sent, each developer must sign in to their account and confirm the invitation to join the new developer organization. This ensures that the accounts are successfully transferred to the new organization.This combination of steps ensures a smooth transfer of developer accounts between organizations in AWS Organizations.
A company’s interactive web application uses an Amazon CloudFront distribution to serve images from an Amazon S3 bucket. Occasionally, third-party tools ingest corrupted images into the S3 bucket. This image corruption causes a poor user experience in the application later. The company has successfully implemented and tested Python logic to detect corrupt images.A solutions architect must recommend a solution to integrate the detection logic with minimal latency between the ingestion and serving.Which solution will meet these requirements?
C) Using an S3 event notification that invokes an AWS Lambda function ensures that the detection logic is applied as soon as images are ingested into the S3 bucket. This solution introduces minimal latency, as the Lambda function can immediately detect and handle corrupted images upon ingestion. This approach also integrates smoothly with the existing logic and ensures that only valid images are served through the CloudFront distribution, improving the user experience without additional complexity or delay.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.