Amazon AWS-Solutions-Architect-Professional Premium Exam Engine pdf - Download Free Updated 216 Questions
Verified AWS-Solutions-Architect-Professional Bundle Real Exam Dumps PDF
NEW QUESTION 39
A sys admin is maintaining an application on AWS. The application is installed on EC2 and user has configured ELB and Auto Scaling. Considering future load increase, the user is planning to launch new servers proactively so that they get registered with ELB.
How can the user add these instances with Auto Scaling?
- A. Decrease the minimum limit of the Auto Scaling group
- B. Launch an instance manually and register it with ELB on the fly
- C. Increase the desired capacity of the Auto Scaling group
- D. Increase the maximum limit of the Auto Scaling group
Answer: C
Explanation:
Explanation
A user can increase the desired capacity of the Auto Scaling group and Auto Scaling will launch a new instance as per the new capacity. The newly launched instances will be registered with ELB if Auto Scaling group is configured with ELB. If the user decreases the minimum size the instances will be removed from Auto Scaling. Increasing the maximum size will not add instances but only set the maximum instance cap.
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-manual-scaling.html
NEW QUESTION 40
A company wants to replace its call system with a solution built using AWS managed services. The company call center would like the solution to receive calls, create contact flows, and scale to handle growth projections. The call center would also like the solution to use deep learning capabilities to recognize the intent of the callers and handle basic tasks, reducing the need to speak an agent. The solution should also be able to query business applications and provide relevant information back to calls as requested.
Which services should the Solution Architect use to build this solution? (Choose three.)
- A. Amazon Lex to recognize the intent of the caller.
- B. Amazon Connect to create a cloud-based contact center.
- C. Amazon Alexa for Business to build conversational interface.
- D. AWS Lambda to integrate with internal systems.
- E. Amazon Rekognition to identity who is calling.
- F. Amazon SQS to add incoming callers to a queue.
Answer: B,D,F
NEW QUESTION 41
A company has developed an application that is running Windows Server on VMware vSphere VMs that the company hosts or premises. The application data is stored in a proprietary format that must be read through the application. The company manually provisioned the servers and the application.
As pan of us disaster recovery plan, the company warns the ability to host its application on AWS temporarily me company's on-premises environment becomes unavailable The company wants the application to return to on-premises hosting after a disaster recovery event is complete The RPO 15 5 minutes.
Which solution meets these requirements with the LEAST amount of operational overhead?
- A. Provision an AWS Storage Gateway We gateway. Recreate the data lo an Amazon S3 bucket. When the on-premises environment is unavailable, use AWS Backup to restore the data to Amazon Elastic Block Store (Amazon EBS) volumes and launch Amazon EC2 instances from these EBS volumes
- B. Provision an Amazon FS* for Windows File Server file system on AWS Replicate :ne data to the We system When the on-premoes environment is unavailable, use AWS CloudFormation templates to provision Amazon EC2 instances and use AWS :CloudFofmation::lnit commands to mount the Amazon FSx file shares
- C. Configure CloudEndure Disaster Recovery Replicate the data to replication Amazon EC2 instances that are attached to Amazon Elastic Block Store (Amazon EBS) volumes When the on-premises environment is unavailable, use CloudEndure to launch EC2 instances that use the replicated volumes.
- D. Configure AWS DataSync. Replicate the data lo Amazon Elastic Block Store (Amazon EBS) volumes When the on-premises environment is unavailable, use AWS CloudFormation templates to provision Amazon EC2 instances and attach the EBS volumes
Answer: B
NEW QUESTION 42
A Solutions Architect must design a highly available, stateless, REST service. The service will require multiple persistent storage layers for service object meta information and the delivery of content. Each request needs to be authenticated and securely processed. There is a requirement to keep costs as low as possible?
How can these requirements be met?
- A. Set up Amazon API Gateway and create the required API resources and methods. Use an Amazon Cognito user pool to control access to the API. Configure the methods to use AWS Lambda proxy integrations, and process each resource with a unique AWS Lambda function. Store request meta information in DynamoDB with Auto Scaling and static content in a secured S3 bucket. Generate presigned URLs when returning references to content stored in Amazon S3.
- B. Use AWS Fargate to host a container that runs a self-contained REST service. Set up an Amazon ECS service that is fronted by an Application Load Balancer (ALB). Use a custom authenticator to control access to the API. Store request meta information in Amazon DynamoDB with Auto Scaling and static content in a secured S3 bucket. Make secure signed requests for Amazon S3 objects and proxy the data through the REST service interface.
- C. Set up Amazon API Gateway and create the required API resources and methods. Use an Amazon API Gateway custom authorizer to control access to the API. Configure the methods to use AWS Lambda custom integrations, and process each resource with a unique Lambda function. Store request meta information in an Amazon ElastiCache Multi-AZ cluster and static content in a secured S3 bucket. Generate presigned URLs when returning references to content stored in Amazon S3.
- D. Use AWS Fargate to host a container that runs a self-contained REST service. Set up an ECS service that is fronted by a cross-zone ALB. Use an Amazon Cognito user pool to control access to the API. Store request meta information in DynamoDB with Auto Scaling and static content in a secured S3 bucket. Generate presigned URLs when returning references to content stored in Amazon S3.
Answer: A
NEW QUESTION 43
You are tasked with moving a legacy application from a virtual machine running inside your datacenter to an Amazon VPC. Unfortunately, this app requires access to a number of on- premises services and no one who configured the app still works for your company. Even worse, there's no documentation for it. What will allow the application running inside the VPC to reach back and access its internal dependencies without being reconfigured? Choose 3 answers
- A. An Elastic IP address on the VPC instance
- B. An AWS Direct Connect link between the VPC and the network housing the internal services
- C. An IP address space that does not conflict with the one on-premises
- D. A VM Import of the current virtual machine
- E. An Internet Gateway to allow a VPN connection
- F. Entries in Amazon Route 53 that allow the Instance to resolve its dependencies' IP addresses
Answer: B,C,D
NEW QUESTION 44
Your company has an on-premises multi-tier PHP web application, which recently experienced downtime due to a large burst in web traffic due to a company announcement. Over the coming days, you are expecting similar announcements to drive similar unpredictable bursts, and are looking to find ways to quickly improve your infrastructures ability to handle unexpected increases in traffic.
The application currently consists of 2 tiers a web tier which consists of a load balancer and several Linux Apache web servers as well as a database tier which hosts a Linux server hosting a MySQL database.
Which scenario below will provide full site functionality, while helping to improve the ability of your application in the short timeframe required?
- A. Migrate to AWS: Use VM Import/Export to quickly convert an on-premises web server to an AMI.
Create an Auto Scaling group, which uses the imported AMI to scale the web tier based on incoming traffic. Create an RDS read replica and setup replication between the RDS instance and on-premises MySQL server to migrate the database. - B. Hybrid environment: Create an AMI, which can be used to launch web servers in EC2. Create an Auto Scaling group, which uses the AMI to scale the web tier based on incoming traffic. Leverage Elastic Load Balancing to balance traffic between on-premises web servers and those hosted in AWS.
- C. Failover environment: Create an S3 bucket and configure it for website hosting. Migrate your DNS to Route53 using zone file import, and leverage Route53 DNS failover to failover to the S3 hosted website.
- D. Offload traffic from on-premises environment: Setup a CIoudFront distribution, and configure CloudFront to cache objects from a custom origin. Choose to customize your object cache behavior, and select a TTL that objects should exist in cache.
Answer: D
Explanation:
Explanation
You can have CloudFront sit in front of your on-prem web environment, via a custom origin (the origin doesn't have to be in AWS). This would protect against unexpected bursts in traffic by letting CloudFront handle the traffic that it can out of cache, thus hopefully removing some of the load from your on-prem web servers.
NEW QUESTION 45
A large financial company is deploying applications that consist of Amazon EC2 and Amazon RDS instances to the AWS Cloud using AWS Cloud Formation.
The CloudFormation stack has the following stack policy:
The company wants to ensure that developers do not lose data by accidentally removing or replacing RDS instances when updating me Cloud Formation stack Developers also still need to be able to modify or remove EC2 instances as needed How should the company change the stack policy to meet these requirements?
- A. Modify the statement to specify "Effect" "Deny" "Action" ["Update *"] for all logical RDS resources
- B. Modify the statement to specify "Effect" "Deny" "Action" ("Update Delete"] lor all logical RDS resources
- C. Add a second statement that specifies "Effect" "Deny" "Action" ["Update'"] for all logical RDS resources
- D. Add a second statement that specifies "Effect" "Deny" "Action" ["Update Delete" "Update Replace"] for all logical RDS resources
Answer: C
NEW QUESTION 46
Your company policies require encryption of sensitive data at rest. You are considering the possible
options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance.
Which of these options would allow you to encrypt your data at rest? Choose 3 answers
- A. Encrypt data inside your applications before storing it on EBS
- B. Encrypt data using native data encryption drivers at the file system level
- C. Implement third party volume encryption tools
- D. Implement SSL/TLS for all services running on the server
- E. Do nothing as EBS volumes are encrypted by default
Answer: A,B,C
NEW QUESTION 47
A team collects and routes behavioral data for an entire company The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway Each public subnet also contains a NAT gateway Most of the company's applications read from and write to Amazon Kinesis Data Streams. Most of the workloads am in private subnets.
A solutions architect must review the infrastructure The solutions architect needs to reduce costs and maintain the function of the applications The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category.
What should the solutions architect do to meet these requirements?
- A. Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that applications have the correct 1AM permissions to use the interface VPC endpoint.
- B. Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that the VPC endpoint policy allows traffic from the applications.
- C. Enable VPC Flow Logs and Amazon Detective Review Detective findings for traffic that is not related to Kinesis Data Streams Configure security groups to block that traffic
- D. Enable VPC Flow Logs. Use Amazon Athena to analyze the logs for traffic that can be removed. Ensure that security groups are Mocking traffic that is responsible for high costs.
Answer: B
NEW QUESTION 48
An organization is planning to host a web application in the AWS VPC. The organization does not want to host a database in the public cloud due to statutory requirements.
How can the organization setup in this scenario?
- A. The organization should plan the app server on the public subnet and database in the organization's data center and connect them with the VPN gateway.
- B. The organization should plan the app server on the public subnet and database in a private subnet so it will not be in the public cloud.
- C. The organization should plan the app server on the public subnet and use RDS with the private subnet for a secure data operation.
- D. The organization should use the public subnet for the app server and use RDS with a storage gateway to access as well as sync the data securely from the local data center.
Answer: A
Explanation:
Explanation
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his own data centre, he can setup a public and VPN only subnet which uses hardware VPN access to connect with his data centre.
When the user has configured this setup with Wizard, it will create a virtual private gateway to route all the traffic of the VPN subnet. If the virtual private gateway is attached with VPC and the user deletes the VPC from the console it will first automatically detach the gateway and only then delete the VPC.
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html
NEW QUESTION 49
Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS)
to set up a message queue between EC2 instances which are used as batch processors Cloud Watch
monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes
batch servers automatically based on parameters set in Cloud Watch alarms. You can use this
architecture to implement which of the following features in a cost effective and efficient manner?
- A. Handle high priority jobs before lower priority jobs by assigning a priority metadata field to SQS
messages. - B. Implement message passing between EC2 instances within a batch by exchanging messages through
SQS. - C. Implement fault tolerance against EC2 instance failure since messages would remain in SQS and worn
can continue with recovery of EC2 instances implement fault tolerance against SQS failure by backing up
messages to S3. - D. Coordinate number of EC2 instances with number of job requests automatically thus Improving cost
effectiveness. - E. Reduce the overall lime for executing jobs through parallel processing by allowing a busy EC2 instance
that receives a message to pass it to the next instance in a daisy-chain setup.
Answer: D
NEW QUESTION 50
You are implementing AWS Direct Connect.
You intend to use AWS public service endpoints, such as Amazon S3, across the AWS Direct Connect link. You want other Internet traffic to use your existing link to an Internet Service Provider.
What is the correct way to configure AWS Direct Connect for access to services such as Amazon S3?
- A. Create a private interface on your AWS Direct Connect link.
Configure a static route via your AWS Direct Connect link that points to Amazon S3.
Configure specific routes to your network in your VPC. - B. Configure a public interface on your AWS Direct Connect link.
Configure a static route via your AWS Direct Connect link that points to Amazon S3.
Advertise a default route to AWS using BGP. - C. Create a public interface on your AWS Direct Connect link.
Redistribute BGP routes into your existing routing infrastructure; advertise specific routes for your network to AWS. - D. Create a private interface on your AWS Direct Connect link.
Redistribute BGP routes into your existing routing infrastructure and advertise a default route to AWS.
Answer: C
Explanation:
https://aws.amazon.com/directconnect/faqs/
NEW QUESTION 51
A company is building an AWS landing zone and has asked a Solutions Architect to design a multi-account access strategy that will allow hundreds of users to use corporate credentials to access the AWS Console. The company is running a Microsoft Active Directory and users will use an AWS Direct Connect connection to connect to AWS. The company also wants to be able to federate to third-party services and providers, including custom applications.
Which solution meets the requirements by using the LEAST amount of management overhead?
- A. Configure single sign-on by connecting the on-premises Active Directory using the AWS Directory Service AD Connector. Enable federation to the AWS services and accounts by using the IAM applications and services linking function. Leverage third-party single sign-on as needed.
- B. Connect the Active Directory to AWS by using single sign-on and an Active Directory Federation Services (AD FS) with SAML 2.0, and then configure the identity Provider (IdP) system to use form-based authentication. Build the AD FS portal page with corporate branding, and integrate third-party applications that support SAML 2.0 as required.
- C. Connect the company's Active Directory to AWS by using AD FS and SAML 2.0. Configure the AD FS claim rule to leverage Regex and a common Active Directory naming convention for the security group to allow federation of all AWS accounts. Leverage third-party single sign-on as needed, and add it to the AD FS server.
- D. Create a two-way Forest trust relationship between the on-premises Active Directory and the AWS Directory Service. Set up AWS Single Sign-On with AWS Organizations. Use single sign-on integrations for connections with third-party applications.
Answer: C
NEW QUESTION 52
Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in high resolution MP4 format. Your workforce is distributed globally, often on the move and using company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your company has no video transcoding expertise and If required you may need to pay for a consultant.
How do you implement the most cost-efficient architecture without compromising high availability and quality of video delivery?
- A. Elastic Transcoder to transcode original high-resolution MP4 videos to HLS.
S3 to host videos with Lifecycle Management to archive original files to Glacier after a few days.
CloudFront to serve HLS transcoded videos from S3. - B. A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue.
EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days.
CloudFront to serve HLS transcoded videos from EC2. - C. Elastic Transcoder to transcode original high-resolution MP4 videos to HLS.
EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days.
CloudFront to serve HLS transcoded videos from EC2. - D. A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue.
S3 to host videos with Lifecycle Management to archive all files to Glacier after a few days.
CloudFront to serve HLS transcoded videos from Glacier.
Answer: A
NEW QUESTION 53
A Solutions Architect has been asked to look at a company's Amazon Redshift cluster, which has quickly become an integral part of its technology and supports key business process. The Solutions Architect is to increase the reliability and availability of the cluster and provide options to ensure that if an issue arises, the cluster can either operate or be restored within four hours.
Which of the following solution options BEST addresses the business need in the most cost-effective manner?
- A. Ensure that the Amazon Redshift cluster has been set up to make use of Auto Scaling groups with the nodes in the cluster spread across multiple Availability Zones.
- B. Use Amazon Kinesis Data Firehose to collect the data ahead of ingestion into Amazon Redshift and create clusters using AWS CloudFormation in another region and stream the data to both clusters.
- C. Ensure that the Amazon Redshift cluster creation has been template using AWS CloudFormation so it can easily be launched in another Availability Zone and data populated from the automated Redshift back-ups stored in Amazon S3.
- D. Create two identical Amazon Redshift clusters in different regions (one as the primary, one as the secondary). Use Amazon S3 cross-region replication from the primary to secondary). Use Amazon S3 cross-region replication from the primary to secondary region, which triggers an AWS Lambda function to populate the cluster in the secondary region.
Answer: C
Explanation:
https://aws.amazon.com/redshift/faqs/?nc1=h_ls Q: What happens to my data warehouse cluster availability and data durability if my data warehouse cluster's Availability Zone (AZ) has an outage? If your Amazon Redshift data warehouse cluster's Availability Zone becomes unavailable, you will not be able to use your cluster until power and network access to the AZ are restored. Your data warehouse cluster's data is preserved so you can start using your Amazon Redshift data warehouse as soon as the AZ becomes available again. In addition, you can also choose to restore any existing snapshots to a new AZ in the same Region. Amazon Redshift will restore your most frequently accessed data first so you can resume queries as quickly as possible.
FROM 37
NEW QUESTION 54
A web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The
instances run in an EC2 Auto Scaling group across multiple Availability Zones. Every night, the Auto
Scaling group doubles in size. Traffic analysis shows that users in a particular region are requesting the
same static content stored locally on the EC2 instances.
How can a Solutions Architect reduces the need to scale and improve application performance for the
users?
- A. Create an Amazon CloudFront distribution for the site and redirect user traffic to the distribution.
- B. Implement Amazon Redshift to create a repository of the content closer to the users.
- C. Re-deploy the application in a new VPC that is closer to the users making the requests.
- D. Store the contents on Amazon EFS instead of the EC2 root volume.
Answer: A
NEW QUESTION 55
A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC.
How should they architect their solution to achieve these goals?
- A. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform for inspection.
- B. Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous mode packet sniffing to see all traffic across the VPC.
- C. Configure servers running in the VPC using the host-based "route" commands to send all traffic through the platform to a scalable virtualized IDS/IPS.
- D. Create a second VPC and route all traffic from the primary application VPC through the second VPC where the scalable virtualized IDS/IPS platform resides.
Answer: A
Explanation:
Although the full text is not there. install IPS/IDS agent in the base image, so all new instance should be spun up of that base image.
NEW QUESTION 56
A user is thinking to use EBS PIOPS volume. Which of the below mentioned options is a right use case for
the PIOPS EBS volume?
- A. System boot volume
- B. Log processing
- C. Mongo DB
- D. Analytics
Answer: C
Explanation:
Provisioned IOPS volumes are designed to meet the needs of I/O-intensive workloads, particularly
database workloads that are sensitive to storage performance and consistency in random access I/O
throughput. Provisioned IOPS volumes are designed to meet the needs of I/O-intensive workloads,
particularly database workloads, that are sensitive to storage performance and consistency in random
access I/O throughput business applications, database workloads, such as NoSQL DB, RDBMS, etc.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
NEW QUESTION 57
A company hosts a game player-matching service on a public facing, physical, on-premises instance that all users are able to access over the internet. All traffic to the instance uses UDP. The company wants to migrate the service to AWS and provide a high level of security. A solutions architect needs to design a solution for the player-matching service using AWS.
Which combination of steps should the solutions architect take to meet these requirements? (Select THREE )
- A. Define an AWS WAF rule to explicitly drop non-UDP traffic, and associate the rule with the load balancer. .
- B. Enable AWS Shield Advanced on all public-facing resources.
- C. Use a Network Load Balancer (NLB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the NLB's Elastic IP address
- D. Use Amazon CloudFront with an Elastic Load Balancer as an origin.
- E. Use an Application Load Balancer (ALB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the ALB's internet-facing fully qualified domain name (FQDN).
- F. Configure a network ACL rule to block all non-UDP traffic. Associate the network ACL with the subnets that hold the load balancer instances.
Answer: B,E,F
NEW QUESTION 58
A company requires that the source, destination, and protocol of all IP packets be recorded when
traversing a private subnet.
What is the MOST secure and reliable method of accomplishing this goal.
- A. Enable AWS CloudTrail logging and specify an Amazon S3 bucket for storing log files.
- B. Enable source destination check on private Amazon EC2 instances.
- C. Create VPC flow logs on the subnet.
- D. Create an Amazon CloudWatch log to capture packet information.
Answer: C
NEW QUESTION 59
......
AWS Solutions Architect Professional Exam Certification Path
Exam Preparation teaches you how the exam questions should be interpreted and the longer you waste your lesson. Our Exam Preparedness: AWS Trained Solutions Architect â Technical preparation course is delivered in various formats: classroom training for learning or participating in a physical or simulated classroom with an AWS Approved Learner. Free multimedia training for learning anytime it is suitable for you. The course reviews sample questions in each subject area and how the topics tested should be understood such that incorrect answers are easier to avoid. Find the right choice for you.
Experience of the use of AWS resources in computing, networking, storage, and database AWS implementation, and operations systems hands-on insight. The capacity of an AWS-based program to recognize and specify functional specifications. The ability to define which AWS programs satisfy particular technological needs. Knowledge of recommended best practices for safe and trustworthy AWS platform applications. Understanding the core architectural tenets of AWS Cloud construction. AWS global infrastructure awareness. An understanding of AWS-related network technology. understand the security characteristics and resources provided by AWS and its ties with conventional providers.
Pass Your Amazon Exam with AWS-Solutions-Architect-Professional Exam Dumps: https://www.itexamsimulator.com/AWS-Solutions-Architect-Professional-brain-dumps.html
AWS-Solutions-Architect-Professional Dumps PDF New [2022] Ultimate Study Guide: https://drive.google.com/open?id=1UIMP_MFcR1zmeggMgp7jC0o_CHSSZnIf
