Latest Amazon AWS-SOLUTIONS-ARCHITECT-ASSOCIATE Dumps PDF | 100% Brilliant Results | RealExamDumps

Question No 1 

A company needs to capture all client connection information from its Application Load Balancer every five minutes. This data will be used to analyze traffic patterns and troubleshoot the application. How can a Solutions Architect meet this requirement?

A. Enable AWS CloudTrail for the Application Load Balancer.
B. Enable Access Logs on the Application Load Balancer.
C. Install CloudWatch Agent on the Application Load Balancer.
D. Enable CloudWatch metrics on the Application Load Balancer.

Answer: B


Question No 2 

A Solutions Architect is designing a web application for document sharing. The users will upload documents that are then made available to other users. There will be tens of thousands of these documents. What is the MOST cost-effective storage solution?

A. Amazon EFS
B. Amazon S3
C. Amazon Glacier
D. Amazon EBS

Answer: A


Question No 3 

A Solutions Architect has been given the following requirements for a company’s VPC: What is the minimum number of subnets that the Solutions Architect will need based on these requirements and best practices?

A. 2
B. 3
C. 4
D. 6

Answer: D


Question No 4 

A company is building a critical ingestion service on AWS that will receive 1,000 incoming events per second. The events must be processed in order, and no events may be lost. Multiple applications will need to process each event. The company will expose the service as RESTful calls through an API Gateway. What should a Solutions Architect use to receive the events based on these requirements?

A. Amazon Kinesis Data Stream
B. Amazon DynamoDB
C. Amazon SQS
D. Amazon SNS

Answer: A


Question No 5 

An AWS Lambda function requires access to an Amazon RDS for SQL Server instance. It is against company policy to store passwords in Lambda functions. How can a Solutions Architect enable the Lambda function to retrieve the database password without violating company policy?

A. Add an IAM policy for IAM database access to the Lambda execution role.
B. Store a one-way hash of the password in the Lambda function.
C. Have the Lambda function use the AWS Systems Manager Parameter Store.
D. Connect to the Amazon RDS for SQL Server instance by using a role assigned to the Lambda function.

Answer: C


Question No 6 

A company has an application that uses Amazon CloudFront for content that is hosted on an Amazon S3 bucket. After an unexpected refresh, the users are still seeing old content. Which step should the Solutions Architect take to ensure that new content is displayed?

A. Perform a cache refresh on the CloudFront distribution that is serving the content.
B. Perform an invalidation on the CloudFront distribution that is serving the content.
C. Create a new cache behavior path with the updated content.
D. Change the TTL value for removing the old objects.

Answer: A


Question No 7 

A company expects its user base to increase five times over one year. Its application is hosted in one region and uses an Amazon RDS MySQL database, an ELB Application Load Balancer, and Amazon ECS to host the website and its microservices. Which design changes should a Solutions Architect recommend to support the expected growth? (Choose two.)

A. Move static files from ECS to Amazon S3
B. Use an Amazon Route 53 geolocation routing policy
C. Scale the environment based on real-time AWS CloudTrail logs
D. Create a dedicated Elastic Load Balancer for each microservice
E. Create RDS read replicas and change the application to use these replicas

Answer: A,E


Question No 8 

A company is rolling out a new web service, but is unsure how many customers the service will attract. However, the company is unwilling to accept any downtime. What could a Solutions Architect recommend to the company in order to keep track of customers’ current session data?

A. Amazon EC2
B. Amazon RDS
C. AWS CloudTrail
D. Amazon DynamoDB

Answer: D


Question No 9 

A web application is running on Amazon EC2 instances behind an Elastic Load Balancing Application Load Balancer (ALB). The EC2 instances should receive no traffic, except for web requests to the application. Based on these requirements, what security group rules should be put on the Amazon EC2 instances?

A. An inbound rule allowing traffic from the security group attached to the ALB
B. An inbound rule allowing traffic from the network ACLs attached to the ALB
C. An outbound rule allowing traffic to the security group attached to the ALB
D. An outbound rule blocking all traffic to the Internet

Answer: A


Question No 10 

A company has a website running on Amazon EC2. The application DNS name points to an Elastic IP address associated with the EC2 instance. In the event of an attack on the website coming from a specific IP address, the company wants a way to block the offending IP address. Which tool or service should a Solutions Architect recommend to block the IP address?

A. Security groups
B. Network ACL
C. AWS WAF
D. AWS Shield

Answer: C