Question 1

A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases. Which solution meets these requirements?

Accepted Answer

AWS Database Migration Service (AWS DMS) with change data capture (CDC) can provide near real-time data replication, which can help achieve an RPO of less than 1 second.

Question 2

A company has an application that uses Amazon Elastic File System (Amazon EFS) to store data. The files are 1 GB in size or larger and are accessed often only for the first few days after creation. The application data is shared across a cluster of Linux servers. The company wants to reduce storage costs tor the application. What should a solutions architect do to meet these requirements?

Accepted Answer

Configuring a Lifecycle policy to move files to the EFS Infrequent Access (IA) storage class after 7 days will reduce storage costs while still allowing the application to access the data when needed.

Question 3

A company is creating a new application that will store a large amount of data. The data will be analyzed hourly and modified by several Amazon EC2 Linux instances that are deployed across multiple Availability Zones. The application team believes the amount of space needed will continue to grow for the next 6 months. Which set of actions should a solutions architect take to support these needs?

Accepted Answer

Amazon Elastic File System (Amazon EFS) is designed for use with Amazon EC2 instances and can be mounted across multiple instances and Availability Zones. It automatically scales as data grows, making it suitable for applications with growing storage needs.

Question 4

A company wants to migrate its accounting system from an on-premises data center to the AWS Cloud in a single AWS Region. Data security and an immutable audit log are the top priorities. The company must monitor all AWS activities for compliance auditing. The company has enabled AWS CloudTrail but wants to make sure it meets these requirements. Which actions should a solutions architect take to protect and secure CloudTrail? (Choose two.)

Accepted Answer

The answer of A company wants to migrate its accounting...

Question 5

A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS Cloud and is considering various storage options. The storage solution must be highly available and integrated with Active Directory for access control. Which solution will satisfy these requirements?

Accepted Answer

Amazon FSx for Windows File Server is designed for Windows-based applications and provides fully managed Windows file storage. It integrates with Active Directory for access control and offers high availability across multiple Availability Zones.

Question 6

A company is using a VPC that is provisioned with a 10.10.1.0/24 CIDR block. Because of continued growth, IP address space in this block might be depleted soon. A solutions architect must add more IP address capacity to the VPC. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

The answer of A company is using a VPC that...

Question 7

A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets. Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution. What should the solutions architect recommend to meet this requirement?

Accepted Answer

The ALB is in the public subnet and is receiving the illegitimate requests. The security group for the ALB should be modified to deny traffic from the offending IP addresses.

Question 8

A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL. What should a solutions architect do to meet these requirements?

Accepted Answer

The answer of A company is developing a file-sharing application...

Question 9

A company's security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs?

Accepted Answer

Using Amazon S3 as the target with a lifecycle policy to transition logs to S3 Standard-IA after 90 days optimizes cost for infrequent access while meeting the requirement for frequent access in the first 90 days.

Question 10

A company needs to provide its employees with secure access to confidential and sensitive files. The company wants to ensure that the files can be accessed only by authorized users. The files must be downloaded securely to the employees' devices. The files are stored in an on-premises Windows file server. However, due to an increase in remote usage, the file server is running out of capacity. Which solution will meet these requirements?

Accepted Answer

The answer of A company needs to provide its employees...

Question 11

A company has several business systems that require access to data stored in a file share. The business systems will access the file share using the Server Message Block (SMB) protocol. The file share solution should be accessible from both of the company's legacy on-premises environments and with AWS. Which services meet the business requirements? (Choose two.)

Accepted Answer

The answer of A company has several business systems that...

Question 12

A news company that has reporters all over the world is hosting its broadcast system on AWS. The reporters send live broadcasts to the broadcast system. The reporters use software on their phones to send live streams through the Real Time Messaging Protocol (RTMP). A solutions architect must design a solution that gives the reporters the ability to send the highest quality streams. The solution must provide accelerated TCP connections back to the broadcast system. What should the solutions architect use to meet these requirements?

Accepted Answer

Amazon CloudFront can be used to provide accelerated TCP connections and optimize the delivery of live streams using RTMP, ensuring high-quality streams for the reporters.

Question 13

A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on-premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. The company must preserve the existing investment in the on-premises backup applications and workflows. What should a solutions architect recommend?

Accepted Answer

AWS Storage Gateway with the iSCSI-virtual tape library (VTL) interface allows the company to eliminate physical tapes while preserving existing backup applications and workflows.

Question 14

A company wants to use a custom distributed application that calculates various profit and loss scenarios. To achieve this goal, the company needs to provide a network connection between its Amazon EC2 instances. The connection must minimize latency and must maximize throughput Which solution will meet these requirements?

Accepted Answer

A placement group with EC2 instances of the same instance type ensures low-latency and high-throughput network performance by placing instances physically close together within the same Availability Zone.

Question 15

A company runs multiple Amazon EC2 Linux instances in a VPC with applications that use a hierarchical directory structure. The applications need to rapidly and concurrently read and write to shared storage. How can this be achieved?

Accepted Answer

Amazon Elastic File System (Amazon EFS) provides a scalable, shared file storage that can be mounted concurrently by multiple EC2 instances, making it suitable for applications that require rapid and concurrent read/write access to shared storage.

Question 16

A company uses a legacy on-premises analytics application that operates on gigabytes of .csv files and represents months of data. The legacy application cannot handle the growing size of .csv files. New .csv files are added daily from various data sources to a central on-premises storage location. The company wants to continue to support the legacy application while users learn AWS analytics services. To achieve this, a solutions architect wants to maintain two synchronized copies of all the .csv files on-premises and in Amazon S3. Which solution should the solutions architect recommend?

Accepted Answer

The answer of A company uses a legacy on-premises analytics...

Question 17

A company is hosting its website by using Amazon EC2 instances behind an Elastic Load Balancer across multiple Availability Zones. The instances run in an EC2 Auto Scaling group. The website uses Amazon Elastic Block Store (Amazon EBS) volumes to store product manuals for users to download. The company updates the product content often, so new instances launched by the Auto Scaling group often have old data. It can take up to 30 minutes for the new instances to receive all the updates. The updates also require the EBS volumes to be resized during business hours. The company wants to ensure that the product manuals are always up to date on all instances and that the architecture adjusts quickly to increased user demand. A solutions architect needs to meet these requirements without causing the company to update its application code or adjust its website. What should the solutions architect do to accomplish this goal?

Accepted Answer

Storing the product manuals in an Amazon S3 bucket and redirecting downloads to this bucket ensures that all instances have access to the most up-to-date content without needing to update or resize EBS volumes. S3 provides high availability and scalability, which aligns with the company's requirements.

Question 18

A company runs an application on a large fleet of Amazon EC2 instances. The application reads and write entries into an Amazon DynamoDB table. The size of the DynamoDB table continuously grows, but the application needs only data from the last 30 days. The company needs a solution that minimizes cost and development effort. Which solution meets these requirements?

Accepted Answer

Using the TTL (Time to Live) feature in DynamoDB allows automatic deletion of items after a specified time, minimizing cost and development effort.

Question 19

A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account. Which solution will meet these requirements in the MOST secure manner?

Accepted Answer

The answer of A company has an AWS Lambda function...

Question 20

A solutions architect is tasked with transferring 750 TB of data from an on-premises network-attached file system located at a branch office Amazon S3 Glacier. The migration must not saturate the on-premises 1 Mbps internet connection. Which solution will meet these requirements?

Accepted Answer

AWS Snowball Edge Storage Optimized devices are designed for large-scale data transfers and can be used to transfer data from an on-premises network-attached file system to Amazon S3 Glacier without saturating the on-premises internet connection.

Exam 9: AWS Certified Solutions Architect - Associate SAA-C02

A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases. Which solution meets these requirements?

A company's security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs?

A company runs multiple Amazon EC2 Linux instances in a VPC with applications that use a hierarchical directory structure. The applications need to rapidly and concurrently read and write to shared storage. How can this be achieved?

A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account. Which solution will meet these requirements in the MOST secure manner?

A solutions architect is tasked with transferring 750 TB of data from an on-premises network-attached file system located at a branch office Amazon S3 Glacier. The migration must not saturate the on-premises 1 Mbps internet connection. Which solution will meet these requirements?