Topic 1: Exam Pool A
A retail company has structured its AWS accounts to be part of an organization in AWS Organizations. The company has set up consolidated billing and has mapped its departments to the following OUs: Finance. Sales. Human Resources
A. In the AWS Billing and Cost Management console for the HR department's production account, turn off R1 sharing.
B. Remove the HR department's production AWS account from the organization. Add the account to the consolidating billing configuration only.
C. In the AWS Billing and Cost Management console, use the organization's management account to turn off R1 sharing for the HR department's production AWS account.
D. Create an SCP in the organization to restrict access to the RIs. Apply the SCP to the OUs of the other departments.
Explanation: You can use the management account of the organization in AWS Billing and Cost Management console to turn off RI sharing for the HR department's production AWS account. This will prevent other departments from sharing the RI discounts and ensure that only the HR department can use the RIs purchased in their production account.
A life sciences company is using a combination of open source tools to manage data
analysis workflows and Docker containers running on servers in its on-premises data
center to process genomics data Sequencing data is generated and stored on a local
storage area network (SAN), and then the data is processed. The research and
development teams are running into capacity issues and have decided to re-architect their
genomics analysis platform on AWS to scale based on workload demands and reduce the
turnaround time from weeks to days
The company has a high-speed AWS Direct Connect connection Sequencers will generate
around 200 GB of data for each genome, and individual jobs can take several hours to
process the data with ideal compute capacity. The end result will be stored in Amazon S3.
The company is expecting 10-15 job requests each day
Which solution meets these requirements?
A. Use regularly scheduled AWS Snowball Edge devices to transfer the sequencing data into AWS When AWS receives the Snowball Edge device and the data is loaded into Amazon S3 use S3 events to trigger an AWS Lambda function to process the data
B. Use AWS Data Pipeline to transfer the sequencing data to Amazon S3 Use S3 events to trigger an Amazon EC2 Auto Scaling group to launch custom-AMI EC2 instances running the Docker containers to process the data
C. Use AWS DataSync to transfer the sequencing data to Amazon S3 Use S3 events to trigger an AWS Lambda function that starts an AWS Step Functions workflow Store the Docker images in Amazon Elastic Container Registry (Amazon ECR) and trigger AWS Batch to run the container and process the sequencing data
D. Use an AWS Storage Gateway file gateway to transfer the sequencing data to Amazon S3 Use S3 events to trigger an AWS Batch job that runs on Amazon EC2 instances running the Docker containers to process the data
Explanation: AWS DataSync can be used to transfer the sequencing data to Amazon S3, which is a more efficient and faster method than using Snowball Edge devices. Once the data is in S3, S3 events can trigger an AWS Lambda function that starts an AWS Step Functions workflow. The Docker images can be stored in Amazon Elastic Container Registry (Amazon ECR) and AWS Batch can be used to run the container and process the sequencing data.
A company has a multi-tier web application that runs on a fleet of Amazon EC2 instances
behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group.
The ALB and the Auto Scaling group are replicated in a backup AWS Region. The
minimum value and the maximum value for the Auto Scaling group are set to zero. An
Amazon RDS Multi-AZ DB instance stores the application’s data. The DB instance has a
read replica in the backup Region. The application presents an endpoint to end users by
using an Amazon Route 53 record.
The company needs to reduce its RTO to less than 15 minutes by giving the application the
ability to automatically fail over to the backup Region. The company does not have a large
enough budget for an active-active strategy.
What should a solutions architect recommend to meet these requirements?
A. Reconfigure the application’s Route 53 record with a latency-based routing policy that load balances traffic between the two ALBs. Create an AWS Lambda function in the backup Region to promote the read replica and modify the Auto Scaling group values. Create an Amazon CloudWatch alarm that is based on the HTTPCode_Target_5XX_Count metric for the ALB in the primary Region. Configure the CloudWatch alarm to invoke the Lambda function.
B. Create an AWS Lambda function in the backup Region to promote the read replica and modify the Auto Scaling group values. Configure Route 53 with a health check that monitors the web application and sends an Amazon Simple Notification Service (Amazon SNS) notification to the Lambda function when the health check status is unhealthy. Update the application’s Route 53 record with a failover policy that routes traffic to the ALB in the backup Region when a health check failure occurs.
C. Configure the Auto Scaling group in the backup Region to have the same values as the
Auto Scaling group in the primary Region. Reconfigure the application’s Route 53 record
with a latency-based routing policy that load balances traffic between the two ALBs.
Remove the read replica. Replace the read replica with a standalone RDS DB instance.
Configure Cross-Region Replication between the RDS DB instances by using snapshots
and Amazon S3.
D. Configure an endpoint in AWS Global Accelerator with the two ALBs as equal weighted
targets. Create an AWS Lambda function in the backup Region to promote the read replica
and modify the Auto Scaling group values. Create an Amazon CloudWatch alarm that is
based on the HTTPCode_Target_5XX_Count metric for the ALB in the primary Region.
Configure the CloudWatch alarm to invoke the Lambda function.
Explanation: an AWS Lambda function in the backup region to promote the read replica and modify the Auto Scaling group values, and then configuring Route 53 with a health check that monitors the web application and sends an Amazon SNS notification to the Lambda function when the health check status is unhealthy. Finally, the application's Route 53 record should be updated with a failover policy that routes traffic to the ALB in the backup region when a health check failure occurs. This approach provides automatic failover to the backup region when a health check failure occurs, reducing the RTO to less than 15 minutes. Additionally, this approach is cost-effective as it does not require an active-active strategy.
A company is running an application in the AWS Cloud. Recent application metrics show
inconsistent response times and a significant increase in error rates. Calls to third-party
services are causing the delays. Currently, the application calls third-party services
synchronously by directly invoking an AWS Lambda function.
A solutions architect needs to decouple the third-party service calls and ensure that all the
calls are eventually completed.
Which solution will meet these requirements?
A. Use an Amazon Simple Queue Service (Amazon SQS) queue to store events and invoke the Lambda function.
B. Use an AWS Step Functions state machine to pass events to the Lambda function.
C. Use an Amazon EventBridge rule to pass events to the Lambda function.
D. Use an Amazon Simple Notification Service (Amazon SNS) topic to store events and Invoke the Lambda function.
Explanation: Using an SQS queue to store events and invoke the Lambda function will
decouple the third-party service calls and ensure that all the calls are eventually completed.
SQS allows you to store messages in a queue and process them asynchronously, which
eliminates the need for the application to wait for a response from the third-party service.
The messages will be stored in the SQS queue until they are processed by the Lambda
function, even if the Lambda function is currently unavailable or busy. This will ensure that
all the calls are eventually completed, even if there are delays or errors.
AWS Step Functions state machines can also be used to pass events to the Lambda
function, but it would require additional management and configuration to set up the state
machine, which would increase operational overhead.
Amazon EventBridge rule can also be used to pass events to the Lambda function, but it
would not provide the same level of decoupling and reliability as SQS.
Using Amazon Simple Notification Service (Amazon SNS) topic to store events and Invoke
the Lambda function, is similar to SQS, but SNS is a publish-subscribe messaging service
and SQS is a queue service. SNS is used for sending messages to multiple recipients,
SQS is used for sending messages to a single recipient, so SQS is more appropriate for
this use case.
A company is using AWS Organizations lo manage multiple AWS accounts For security
purposes, the company requires the creation of an Amazon Simple Notification Service
(Amazon SNS) topic that enables integration with a third-party alerting system in all the
Organizations member accounts
A solutions architect used an AWS CloudFormation template to create the SNS topic and
stack sets to automate the deployment of CloudFormation stacks Trusted access has been
enabled in Organizations
What should the solutions architect do to deploy the CloudFormation StackSets in all AWS
accounts?
A. Create a stack set in the Organizations member accounts. Use service-managed permissions. Set deployment options to deploy to an organization. Use CloudFormation StackSets drift detection.
B. Create stacks in the Organizations member accounts. Use self-service permissions. Set deployment options to deploy to an organization. Enable the CloudFormation StackSets automatic deployment.
C. Create a stack set in the Organizations management account Use service-managed permissions. Set deployment options to deploy to the organization. Enable CloudFormation StackSets automatic deployment.
D. Create stacks in the Organizations management account. Use service-managed permissions. Set deployment options to deploy to the organization. Enable CloudFormation StackSets drift detection.
Page 10 out of 97 Pages |
Previous |