单选题 A company used Amazon EC2 instances to deploy a web fleet to host a blog site. The EC2 instances are behind an Application Load Balancer (ALB) and are configured in an Auto Scaling group. The web application stores all blog content on an Amazon EFS volume. The company recently added a feature for bloggers to add video to their posts, attracting 10 times the previous user traffic. At peak times of day, users report buffering and timeout issues while attempting to reach the site or watch videos. Which is the MOST cost-efficient and scalable deployment that will resolve the issues for users?

A、 Reconfigure Amazon EFS to enable maximum I/O

B、 Update the blog site to use instance store volumes for storage. Copy the site contents to the volumes at launch and to Amazon S3 at shutdown.

C、 Configure an Amazon CloudFront distribution. Point the distribution to an S3 bucket, and migrate the videos from EFS to Amazon S3.

D、 Set up an Amazon CloudFront distribution for all suite contents, and point the distribution at the ALB

查看答案

由4l***en提供分享举报纠错

相关试题

单选题 A company will several AWS accounts is using AWS Organizations and service control policies (SCPs). An Administrator created the following SCP and has attached it to an organizational unit (OU) that contains AWS account 1111-1111-1111:

10b741693a3ac121a48669a7c2fee151

{

"Version": "2012-10-27" "Statement": [

{

"Side": "AllowsAllActions",

"Effect": "Allow",

"Action": "*",

"Resource": "*"

{

"Side": "DenyCloudTrail",

"Effect": "Deny",

"Action": "CloudTrail:*",

"Resource": "*"

}

]

}

Developers working in account 1111-1111-1111 complain that they cannot create Amazon S3 buckets. How should the Administrator address this problem?

A、Add s3:CreateBucket with "Allow" effect to the SCP.仅

B、Remove the account from the OU, and attach the SCP directly to account 1111-1111-1111.

C、Instruct the Developers to add Amazon S3 permissions to their IAM entities.

D、Remove the SCP from account 1111-1111-1111.

查看答案

单选题 A company is using AWS CloudFormation to deploy its infrastructure. The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted. How can the company prevent users from accidentally deleting data in this way?

A、Modify the CloudFormation templates to add a DeletionPolicy attribute to RDS and EBS resources

B、Configure a stack policy that disallows the deletion of RDS and EBS resources.

C、Modify IAM policies to deny deleting RDS an EBS resources that are tagged with an "aws:cloudformation:stackname" tag.

D、Use AWS Config rules to prevent deleting RDS and EBS resources.

查看答案

单选题 A Solutions Architect is designing the data storage and retrieval architecture for a new application that a company will be launching soon. The application is designed to ingest millions of small records per minute from devices all around the world. Each record is less than 4 KB in size and needs to be stored in a durable location where it can be retrieved with low latency. The data is ephemeral and the company is required to store the data for 120 days only, after which the data can be deleted.The Solutions Architect calculates that, during the course of a year, the storage requirements would be about 10-15 TB. Which storage strategy is the MOST cost-effective and meets the design requirements?

A、Design the application to store each incoming record as a single .CSV file in an Amazon S3 bucket to allow for indexed retrieval. Configure a lifecycle policy to delete data older than 120 days.

B、Design the application to store each incoming record in an Amazon DynamoDB table properly configured for the scale.Configure the DynamoDB Time to Live (TTL) feature to delete records older than 120 days.

C、Design the application to store each incoming record in a single table in an Amazon RDS MySQL database. Run a nightly cron job that executes a query to delete any records older than 120 days.

D、Design the application to batch incoming records before writing them to an Amazon S3 bucket. Update the metadata for the object to contain the list of records in the batch and use the Amazon S3 metadata search feature to retrieve the data.Configure a lifecycle policy to delete the data after 120 days.

查看答案

单选题 An enterprise company wants to allow its Developers to purchase third-party software through AWS Marketplace. The company uses an AWS Organizations account structure with full features enabled, and has a shared services account in each organizational unit (OU) that will be used by Procurement Managers. The Procurement team's policy indicates that Developers should be able to obtain third-party software from an approved list only and use Private Marketplace in AWS Marketplace to achieve this requirement. The Procurement team wants administration of Private Marketplace to be restricted to a role named procurement- manager-role, which could be assumed by Procurement Managers. Other IAM users, groups, roles, and account administrators in the company should be denied Private Marketplace administrative access.

What is the MOST efficient way to design an architecture to meet these requirements?

A、Create an IAM role named procurement-manager-role in all AWS accounts in the organization. Add the PowerUserAccess managed policy to the role. Apply an inline policy to all IAM users and roles in every AWS account to deny permissions on the AWSPrivateMarketplaceAdminFullAccess managed policy.

B、Create an IAM role named procurement-manager-role in all AWS accounts in the organization. Add the AdministratorAccess managed policy to the role. Define a permissions boundary with the AWSPrivateMarketplaceAdminFullAccess managed policy and attach it to all the Developer roles.

C、Create an IAM role named procurement-manager-role in all the shared services accounts in the organization. Add the AWSPrivateMarketplaceAdminFullAccess managed policy to the role. Create an organization root-level SCP to deny permissions to administer Private Marketplace to everyone except the role named procurement- manager-role. Create another organization root-level SCP to deny permissions to create an IAM role named procurement-manager- role toeveryone in the organization.

D、Create an IAM role named procurement-manager-role in the AWS accounts that will be used by Developers. Add the AWSPrivateMarketplaceAdminFullAccess managed policy to the role. Create an SCP in Organizations to deny permissions to administer Private Marketplace to everyone except the role named procurement-manager-role. Apply the SCP to all the shared services accounts in the organization.

查看答案

单选题 An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The company's CIO has asked a Solutions Architect to design a simple, highly available, and loosely coupled order processing application. The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays. Which of the following is the MOST reliable approach to meet the requirements?

A、Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them.

B、Receive the orders in an Amazon SQS queue and trigger an AWS Lambda function to process them.

C、Receive the orders using the AWS Step Functions program and trigger an Amazon ECS container to process them.

D、Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them.

查看答案

单选题 A company has a serverless application comprised of Amazon CloudFront, Amazon API Gateway, and

AWS Lambda functions. The current deployment process of the application code is to create a new version

number of the Lambda function and run an AWS CLI script to update. If the new function version has errors,

another CLI script reverts by deploying the previous working version of the function. The company would like

to decrease the time to deploy new versions of the application logic provided by the Lambda functions, and also

reduce the time to detect and revert when errors are identified.

How can this be accomplished?

A、Create and deploy nested AWS CloudFormation stacks with the parent stack consisting of the AWS CloudFront distribution and API Gateway, and the child stack containing the Lambda function. For changes to Lambda, create an AWS CloudFormation change set and deploy; if errors are triggered, revert the AWS CloudFormation change set to the previous version.

B、Use AWS SAM and built-in AWS CodeDeploy to deploy the new Lambda version, gradually shift traffic to the new version, and use pre-traffic and post-traffic test functions to verify code. Rollback if Amazon CloudWatch alarms are triggered.

C、Refactor the AWS CLI scripts into a single script that deploys the new Lambda version.

D、Create and deploy an AWS CloudFormation stack that consists of a new API Gateway endpoint that references the new Lambda version. Change the CloudFront origin to the new API Gateway endpoint, monitor errors and if detected, change the AWS CloudFront origin to the previous API Gateway endpoint.

查看答案

单选题 A Solutions Architect must establish a patching plan for a large mixed fleet of Windows and Linux servers. The patching plan must be implemented securely, be audit ready, and comply with the company's business requirements. Which option will meet these requirements with MINIMAL effort?

A、Install and use an OS-native patching service to manage the update frequency and release approval for all instances. Use AWS Config to verify the OS state on each instance and report on any patch compliance issues.

B、Use AWS Systems Manager on all instances to manage patching. Test patches outside of production and then deplyy during a maintenance window with the appropriate approval.

C、Use AWS OpsWorks for Chef Automate to run a set of scripts that will iterate through all instances of a given type.Issue the appropriate OS command to get and install updates on each instance, including any required restarts during the maintenance window.

D、Migrate all applications to AWS OpsWorks and use OpsWorks automatic patching support to keep the OS up-to-date following the initial installation. Use AWS Config to provide audit and compliance reporting.

查看答案

单选题 A finance company is running its business-critical application on current-generation Linux EC2 instances. The application includes a self-managed MySQL database performing heavy I/O operations. The application is working fine to handle a moderate amount of traffic during the month. However, it slows down during the final three days of each month due to month-end reporting, even though the company is using Elastic Load Balancers and Auto Scaling within its infrastructure to meet the increased demand. Which of the following actions would allow the database to handle the month-end load with the LEAST impact on performance?

A、Pre-warming Elastic Load Balancers, using a bigger instance type, changing all Amazon EBS volumes to GP2 volumes.

B、Performing a one-time migration of the database cluster to Amazon RDS, and creating several additional read replicas to handle the load during end of month.

C、Using Amazon CloudWatch with AWS Lambda to change the type, size, or IOPS of Amazon EBS volumes in the cluster based on a specific CloudWatch metric.

D、Replacing all existing Amazon EBS volumes with new PIOPS volumes that have the maximum available storage size and I/O per second by taking snapshots before the end of the month and reverting back afterwards.

查看答案