A company is planning to migrate an Amazon RDS for Oracle database to an RDS for PostgreSQL DB instance in another AWS account. A solutions architect needs to design a migration strategy that will require no downtime and that will minimize the amount of time necessary to complete the migration. The migration strategy must replicate all existing data and any new data that is created during the migration. The target database must be identical to the source database at completion of the migration process.All applications currently use an Amazon Route 53 CNAME record as their endpoint for communication with the RDS for Oracle DB instance. The RDS for Oracle DB instance is in a private subnet.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)
Answer(s): A,C,E
A) Using the AWS Schema Conversion Tool (AWS SCT) is the best way to migrate the database schema from the Oracle DB instance to the PostgreSQL DB instance since the schema will need to be adapted to PostgreSQL.C) Configuring VPC peering between the source and target accounts ensures network connectivity between the databases, allowing secure data transfer. The security groups also need to be configured to permit traffic on the database port between the two VPCs.E) Using AWS Database Migration Service (AWS DMS) with a full load plus change data capture (CDC) migration ensures that the migration captures both the existing data and any new changes made during the migration process. This approach allows for near-zero downtime, and updating the Route 53 CNAME record after the migration ensures applications can seamlessly switch to the new database.This combination of steps enables a smooth migration with no downtime and ensures that the target database remains identical to the source database at the completion of the process.
A company has implemented an ordering system using an event-driven architecture. During initial testing, the system stopped processing orders. Further log analysis revealed that one order message in an Amazon Simple Queue Service (Amazon SQS) standard queue was causing an error on the backend and blocking all subsequent order messages. The visibility timeout of the queue is set to 30 seconds, and the backend processing timeout is set to 10 seconds. A solutions architect needs to analyze faulty order messages and ensure that the system continues to process subsequent messages.Which step should the solutions architect take to meet these requirements?
Answer(s): D
D) Configuring a new SQS standard queue as a dead-letter queue isolates faulty messages, preventing them from blocking subsequent messages. The dead-letter queue will capture messages that cannot be processed successfully after a defined number of retries. This ensures that the system continues to process other orders while the faulty messages are analyzed and handled separately, meeting the requirements without causing a system halt.
A company has automated the nightly retraining of its machine learning models by using AWS Step Functions. The workflow consists of multiple steps that use AWS Lambda. Each step can fail for various reasons, and any failure causes a failure of the overall workflow.A review reveals that the retraining has failed multiple nights in a row without the company noticing the failure. A solutions architect needs to improve the workflow so that notifications are sent for all types of failures in the retraining process.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)
Answer(s): A,B,C
A) Creating an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription ensures that the team will receive notifications via email when a failure occurs.B) Creating a task named "Email" that forwards input arguments to the SNS topic ensures that the correct information is passed to the notification system, allowing for relevant failure details to be communicated to the team.C) Adding a Catch field to all Task, Map, and Parallel states with "ErrorEquals": [ "States.ALL" ] ensures that the workflow captures all types of errors (not just runtime errors), and the "Next" field ensures that the failure redirects to the "Email" task to trigger a notification.This combination ensures that any type of failure in the workflow will result in an immediate notification to the team, allowing them to take corrective action promptly.
A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC. An AWS Site-to-Site VPN connects the VPC to the company's on-premises network. The new service must communicate with existing on-premises services. The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone. This DNS zone is wholly hosted on premises and is available only on the company's private network.A solutions architect must ensure that the new service can resolve hostnames on the company.example domain to integrate with existing services.Which solution meets these requirements?
Answer(s): B
B) Enabling DNS hostnames for the VPC and configuring an outbound endpoint with Amazon Route 53 Resolver allows the EC2 instances in the VPC to forward DNS queries for the company.example domain to the on-premises DNS servers. By creating a Resolver rule to forward requests for this domain, the on-premises DNS servers will handle the resolution, ensuring that the new service can resolve hostnames from the company’s private network and integrate with existing services.
A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC. Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway. The transit gateway uses its default route table for any VPC attachment.A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company's other VPCs. A solutions architect needs to limit the traffic between the VPCs. Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs.What should the solutions architect do to meet these requirements?
Answer(s): C
C) Creating a dedicated transit gateway route table for each VPC attachment and routing traffic only to authorized VPCs ensures that VPCs can communicate with each other only as per the predefined rules. By isolating the traffic flow at the transit gateway level, the solution restricts inter-VPC communication, allowing only authorized VPCs to exchange traffic, which meets the security requirements of limiting traffic between VPCs.
A company has a Windows-based desktop application that is packaged and deployed to the users' Windows machines. The company recently acquired another company that has employees who primarily use machines with a Linux operating system. The acquiring company has decided to migrate and rehost the Windows-based desktop application to AWS.All employees must be authenticated before they use the application. The acquiring company uses Active Directory on premises but wants a simplified way to manage access to the application on AWS for all the employees.Which solution will rehost the application on AWS with the LEAST development effort?
C) Using Amazon AppStream 2.0 provides a quick way to rehost the Windows desktop application without significant redevelopment efforts. AppStream 2.0 allows the application to run on AWS and stream to users via a browser. By leveraging AppStream 2.0 On-Demand fleet with auto-scaling, authentication via AppStream 2.0 user pools, and a browser-based streaming session, the company can easily provide access to both Windows and Linux users without requiring major changes to the existing application. This approach also simplifies authentication and access management, meeting the company’s requirements.
A company is collecting a large amount of data from a fleet of IoT devices. Data is stored as Optimized Row Columnar (ORC) files in the Hadoop Distributed File System (HDFS) on a persistent Amazon EMR cluster. The company's data analytics team queries the data by using SQL in Apache Presto deployed on the same EMR cluster. Queries scan large amounts of data, always run for less than 15 minutes, and run only between 5 PM and 10 PM.The company is concerned about the high cost associated with the current solution. A solutions architect must propose the most cost-effective solution that will allow SQL data queries.Which solution will meet these requirements?
B) Storing data in Amazon S3 and using the AWS Glue Data Catalog along with Amazon Athena is the most cost-effective solution. Amazon Athena allows for serverless querying of data stored in S3 using SQL, which is more cost-efficient compared to maintaining a persistent Amazon EMR cluster. Athena supports querying large datasets, such as the ORC files from the IoT devices, and since queries only run during a specific time window, Athena’s on-demand nature is ideal. This setup eliminates the need for a persistent EMR cluster, thus reducing costs.
A large company recently experienced an unexpected increase in Amazon RDS and Amazon DynamoDB costs. The company needs to increase visibility into details of AWS Billing and Cost Management. There are various accounts associated with AWS Organizations, including many development and production accounts. There is no consistent tagging strategy across the organization, but there are guidelines in place that require all infrastructure to be deployed using AWS CloudFormation with consistent tagging. Management requires cost center numbers and project ID numbers for all existing and future DynamoDB tables and RDS instances.Which strategy should the solutions architect provide to meet these requirements?
C) Using Tag Editor to tag existing resources and creating cost allocation tags for cost center and project ID ensures that all current resources are properly tagged. Implementing Service Control Policies (SCPs) to restrict the creation of new resources that do not include the required tags ensures compliance with the company’s guidelines moving forward. This strategy provides a way to apply consistent tagging across the organization, which aligns with the requirements for tagging all infrastructure deployed using AWS CloudFormation.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.