A company is migrating its on-premises systems to AWS.
The computers consist of a combination of Windows and Linux virtual machines on VMware and physical servers.
The company wants to be able to identify dependencies between on-premises systems and group systems together into applications to build migration plans.
The company also needs to understand the performance requirements for systems so they can be right-sized.
How can these requirements be met? "Install the AWS Application Discovery Service Discovery Connector in VMware vCenter. Install the AWS Application Discovery Service Discovery Agent on the physical on-premises servers. Allow the Discovery Agent to collect data for a period of time" "Extract system information from an on-premises configuration management database (CMDB). Import the data directly into the Application Discovery Service" "Install the AWS Application Discovery Service Discovery Agent on each of the on-premises systems. Allow the Discovery Agent to collect data for a period of time" "Install the AWS Application Discovery Service Discovery Connector in VMware vCenter. Allow the Discovery Connector to collect data for one week" .
A new AWS Lambda function has been created to replicate objects that are received in an Amazon S3 bucket to several other S3 buckets in various AWS accounts.
The Lambda function is triggered when an object create event occurs in the main S3 bucket.
A Solutions Architect is concerned that the function may impact other critical functions due to Lambda's regional concurrency limit.
How can the solutions architect ensure the new Lambda function will not impact other critical Lambda functions? "Configure the reserved concurrency limit for the new Lambda function. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric" "Modify the execution timeout for the Lambda function to the maximum allowable value. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric" "Configure Amazon S3 event notifications to publish events to an Amazon S3 queue in a different account. Create the Lambda function in the same account as the SQS queue and trigger the function when messages a published to the queue" "Ensure the new Lambda function implements an exponential backoff algorithm. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric".
A database for an eCommerce website was deployed on an Amazon RDS for MySQL DB instance with General Purpose SSD storage.
The database was running performantly for several weeks until a peak shopping period when customers experienced slow performance and timeouts.
Amazon CloudWatch metrics indicate that reads and writes to the DB instance were experiencing long response times.
Metrics show that CPU utilization is <50%, plenty of available memory, and sufficient free storage space. There is no evidence of database connectivity issues in the application server logs.
What could be the root cause of database performance issues? "A large number of reads and writes exhausted the I/O credit balance due to provisioning low disk storage during the setup phase" "The increased load caused the data in the tables to change frequently, requiring indexes to be rebuilt to optimize queries" "The increased load resulted in the maximum number of allowed connections to the database instance" "A large number of reads and writes exhausted the network bandwidth available to the RDS for MySQL DB instance".
A Solutions Architect is designing a web application that will serve static content in an Amazon S3 bucket and dynamic content hosted on Amazon EC2 instances behind an Application Load Balancer (ALB).
The application will use Amazon CloudFront and the solution should require that the content is available through CloudFront only.
Which combination of steps should the Solutions Architect take to restrict direct content access to CloudFront? (Select THREE.) "Create a web ACL in AWS WAF with a rule to validate the presence of a custom header and associate the web ACL with the ALB" "Configure CloudFront to add a custom header to requests that it sends to the origin" "Create a CloudFront Origin Access Identity (OAI) and add it to the CloudFront distribution. Update the S3 bucket policy to allow access to the OAI only" "Create a web ACL in AWS WAF with a rule to validate the presence of a custom header and associate the web ACL with the CloudFront distribution" "Configure the ALB to add a custom header to HTTP requests that are sent to the EC2 instances" "Configure an S3 bucket policy to allow access from the CloudFront IP addresses only".
A company requires that only the master account in AWS Organizations is able to purchase Amazon EC2 Reserved Instances. Current and future member accounts should be blocked from purchasing Reserved Instances.
Which solution will meet these requirements? "Create an SCP with the Deny effect on the ec2:PurchaseReservedInstancesOffering action. Attach the SCP to the root of the organization" "Move all current member accounts to a new OU. Create an SCP with the Deny effect on the ec2:PurchaseReservedInstancesOffering action. Attach the SCP to the new OU" "Create an Amazon CloudWatch Events rule that triggers a Lambda function to terminate any Reserved Instances launched by member accounts" "Create an OU for the master account and each member account. Move the accounts into their respective OUs. Apply an SCP to the master accounts’ OU with the Allow effect for the ec2:PurchaseReservedInstancesOffering".
A company is migrating an order processing application to the AWS Cloud.
The usage patterns vary significantly but the application must be available at all times.
Orders must be processed immediately and in the order that they are received.
Which actions should a Solutions Architect take to meet these requirements? "Use Amazon SQS with FIFO to queue messages in the correct order. Use Reserved Instances in multiple Availability Zones for processing" "Use Amazon SQS with FIFO to queue messages in the correct order. Use Spot Instances in multiple Availability Zones for processing" "Use Amazon SNS with FIFO to send orders in the correct order. Use Spot Instances in multiple Availability Zones for processing" "Use Amazon SNS with FIFO to send orders in the correct order. Use a single large Reserved Instance for processing".
A new application that provides fitness and training advice has become extremely popular with thousands of new users from around the world.
The web application is hosted on a fleet of Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB).
The content consists of static media files and different resources must be loaded depending on the client operating system.
Users have reported increasing latency for loading web pages and Amazon CloudWatch is showing high utilization of the EC2 instances.
Which set actions should a solutions architect take to improve response times? "Move content to Amazon S3. Create an Amazon CloudFront distribution to serve content out of the S3 bucket. Use Lambda@Edge to load different resources based on the User-Agent HTTP header" "Create separate Auto Scaling groups based on client operating systems. Switch to a Network Load Balancer (NLB). Use the User-Agent HTTP header in the NLB to route to a different set of EC2 instances" "Create a separate ALB for each client operating system. Create one Auto Scaling group behind each ALB. Use Amazon Route 53 to route to different ALBs depending on the User-Agent HTTP header" "Move content to Amazon S3. Create an Amazon CloudFront distribution to serve content out of the S3 bucket. Use the User-Agent HTTP header to load different content".
A company has deployed an application that uses an Amazon DynamoDB table and the user base has increased significantly. Users have reported poor response times during busy periods but no error pages have been generated.
The application uses Amazon DynamoDB in read-only mode.
The operations team has determined that the issue relates to ProvisionedThroughputExceeded exceptions in the application logs when doing Scan and read operations.
A Solutions Architect has been tasked with improving application performance.
Which solutions will meet these requirements whilst MINIMIZING changes to the application? (Select TWO.) "Enable DynamoDB Auto Scaling to manage the throughput capacity as table traffic increases. Set the upper and lower limits to control costs and set a target utilization based on the peak usage" "Provision a DynamoDB Accelerator (DAX) cluster with the correct number and type of nodes. Tune the item and query cache configuration for an optimal user experience" "Enable adaptive capacity for the DynamoDB table to minimize throttling due to throughput exceptions" "Provision an Amazon ElastiCache for Redis cluster. The cluster should be provisioned with enough shards to handle the peak application load" "Include error retries and exponential backoffs in the application code to handle throttling errors and reduce load during periods of high requests".
A company runs a data processing application on-premises and plans to move it to the AWS Cloud.
Files are uploaded by users to a web application which then stores the files on an NFS-based storage system and places a message on a queue.
The files are then processed from the queue and the results are returned to the user (and stored in long-term storage).
This process can take up to 30 minutes.
The processing times vary significantly and can be much higher during business hours.
What is the MOST cost-effective migration recommendation? "Create a queue using Amazon SQS. Run the web application on Amazon EC2 and configure it to publish to the new queue. Use Amazon EC2 instances in an EC2 Auto Scaling group to pull requests from the queue and process the files. Scale the EC2 instances based on the SQS queue length. Store the processed files in an Amazon S3 bucket" "Create a queue using Amazon SQS. Run the web application on Amazon EC2 and configure it to publish to the new queue. Use an AWS Lambda function to poll the queue, pull requests, and process the files. Store the processed files in an Amazon S3 bucket" "Create a queue using Amazon MQ. Run the web application on Amazon EC2 and configure it to publish to the new queue. Launch an Amazon EC2 instance from a preconfigured AMI to poll the queue, pull requests, and process the files. Store the processed files in Amazon EFS. Terminate the EC2 instance after the task is complete" "Create a queue using Amazon MQ. Run the web application on Amazon EC2 and configure it to publish to the new queue. Use an AWS Lambda function to poll the queue, pull requests, and process the files. Store the processed files in Amazon EFS".
A solution is required for updating user metadata and will be initiated by a fleet of front-end web servers.
The solution must be capable of scaling rapidly from hundreds to tens of thousands of jobs in less than a minute.
The solution must be asynchronous and minimize costs.
Which solution should a Solutions Architect use to meet these requirements? "Create an AWS Lambda function that will update user metadata. Create an Amazon SQS queue and configure it as an event source for the Lambda function. Update the web application to send jobs to the queue" "Create an AWS Lambda function that will update user metadata. Create AWS Step Functions that will trigger the Lambda function. Update the web application to initiate Step Functions for every job" "Create an AWS CloudFormation stack that is updated by an AWS Lambda function. Configure the Lambda function to update the metadata" "Create an Amazon EC2 Auto Scaling group of EC2 instances that pull messages from an Amazon SQS queue and process the user metadata updates. Configure the web application to send jobs to the queue" .
An application consists of three tiers within a single Region. A Solutions Architect is designing a disaster recovery strategy that includes an RTO of 30 minutes and an RPO of 5 minutes for the data tier.
Application tiers use Amazon EC2 instances and are stateless. The data tier consists of a 30TB Amazon Aurora database.
Which combination of steps satisfies the RTO and RPO requirements while optimizing costs? (Select TWO.) "Deploy a hot standby of the application tiers to another Region" "Create a cross-Region Aurora MySQL Replica of the database" "Create daily snapshots of the EC2 instances and replicate to another Region" "Create snapshots of the Aurora database every 5 minutes" "Use AWS DMS to replicate the Aurora DB to an RDS database in another Region".
A company is designing an application that will requires cross-Region disaster recovery with an RTO of less than 5 minutes and an RPO of less than 1 minute.
The application tier DR solution has already been designed and a Solutions Architect must design the data recovery solution for the MySQL database tier.
How should the database tier be configured to meet the data recovery requirements? "Use an Amazon Aurora global database with the primary in the active Region and the secondary in the failover Region" "Use an Amazon RDS for MySQL instance with a cross-Region read replica in the failover Region" "Use an Amazon RDS for MySQL instance with a Multi-AZ deployment" "Create an Amazon RDS instance in the active Region and use a MySQL standby database on an Amazon EC2 instance in the failover Region".
A global enterprise company is in the process of creating an infrastructure services platform for its users. The company has the following requirements:
· Centrally manage the creation of infrastructure services using a central AWS account.
· Distribute infrastructure services to multiple accounts in AWS Organizations.
· Follow the principle of least privilege to limit end users’ permissions for launching and managing applications.
Which combination of actions using AWS services will meet these requirements? (Select TWO.) "Define the infrastructure services in AWS CloudFormation templates. Upload each template as an AWS Service Catalog product to portfolios created in a central AWS account. Share these portfolios with the AWS Organizations structure created for the company" "Allow IAM users to have AWSServiceCatalogEndUserReadOnlyAccess permissions only. Assign the policy to a group called Endusers, add all users to the group. Apply launch constraints" "Define the infrastructure services in AWS CloudFormation templates. Add the templates to a central Amazon S3 bucket and add the IAM users that require access to the S3 bucket policy" "Grant IAM users AWSCloudFormationFullAccess and AmazonS3ReadOnlyAccess permissions. Add an Organizations SCP at the AWS account root user level to deny all services except AWS CloudFormation and Amazon S3" "Allow IAM users to have AWSServiceCatalogEndUserFullAccess permissions. Assign the policy to a group called Endusers, add all users to the group. Apply launch constraints".
A company has deployed a SAML 2.0 federated identity solution with their on-premises identity provider (IdP) to authenticate users' access to the AWS environment. A Solutions Architect ran authentication tests through the federated identity web portal and access to the AWS environment was granted. When a test users attempt to authenticate through the federated identity web portal, they are not able to access the AWS environment.
Which items should the solutions architect check to ensure identity federation is properly configured? (Select THREE.) "The IAM roles created for the federated users' or federated groups' trust policy have set the SAML provider as the principal" "The web portal calls the AWS STS AssumeRoleWithSAML API with the ARN of the SAML provider, the ARN of the IAM role, and the SAML assertion from IdP" "The company's IdP defines SAML assertions that properly map users or groups in the company to IAM roles with appropriate permissions" "The IAM users are providing the time-based one-time password (TOTP) codes required for authenticated access" "The IAM users permissions policy has allowed the sts:AssumeRoleWithSAML API action allowed in their permissions policy" "The AWS STS service has the on-premises IdP configured as an event source for authentication requests".
A company has a mobile application that uses Amazon API Gateway, AWS Lambda, and Amazon DynamoDB.
The application is write intensive and costs have recently increased significantly.
The biggest increase in cost has been for the AWS Lambda functions. Application utilization is unpredictable but has been increasing steadily each month.
A Solutions Architect has noticed that the Lambda function execution time averages over 4 minutes.
This is due to wait time for a high-latency network call to an on-premises MySQL database. A VPN is used to connect to the VPC.
How can the Solutions Architect reduce the cost of the current architecture? · Migrate the MySQL database server into a Multi-AZ Amazon RDS for MySQL.
· Enable API caching on API Gateway to reduce the number of Lambda function invocations.
· Enable Auto Scaling in DynamoDB. · Replace the VPN with AWS Direct Connect to reduce the network latency to the on-premises MySQL database.
· Enable local caching in the mobile application to reduce the Lambda function invocation calls.
· Offload the frequently accessed records from DynamoDB to Amazon ElastiCache. · Replace the VPN with AWS Direct Connect to reduce the network latency to the on-premises MySQL database.
· Cache the API Gateway results to Amazon CloudFront.
· Use Amazon EC2 Reserved Instances instead of Lambda.
· Enable Auto Scaling on EC2 and use Spot Instances during peak times.
· Enable DynamoDB Auto Scaling to manage target utilization. · Migrate the MySQL database server into a Multi-AZ Amazon RDS for MySQL.
· Enable caching of the Amazon API Gateway results in Amazon CloudFront to reduce the number of Lambda function invocations.
· Enable DynamoDB Accelerator for frequently accessed records and enable the DynamoDB Auto Scaling feature.
|
