Instant Access Amazon.AWS-Solutions-Architect-Associate.v2025-04-12.q256 Actual Practice Test Engine for Free (Page 2)

Question 1

A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files A solutions architect needs to implement a highly available SFTP solution that minimizes operational overhead.
Which solution will meet these requirements?

A.Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint Choose the S3 data lake as the destination
B.Use Amazon S3 File Gateway as an SFTP server Expose the S3 File Gateway endpoint URL to the new partner Share the S3 File Gateway endpoint with the new partner
C.Launch an Amazon EC2 instance in a private subnet in a VPC. Instruct the new partner to upload files to the EC2 instance by using a VPN. Run a cron job script on the EC2 instance to upload files to the S3 data lake
D.Launch Amazon EC2 instances in a private subnet in a VPC. Place a Network Load Balancer (NLB) in front of the EC2 instances. Create an SFTP listener port for the NLB Share the NLB hostname with the new partner Run a cron job script on the EC2 instances to upload files to the S3 data lake.

Correct Answer: A

This option is the most cost-effective and simple way to enable SFTP access to the S3 data lake. AWS Transfer Family is a fully managed service that supports secure file transfers over SFTP, FTPS, and FTP protocols. You can create an SFTP-enabled server with a public endpoint and associate it with your S3 bucket.
You can also use AWS Identity and Access Management (IAM) roles and policies to control access to your S3 data lake. The service scales automatically to handle any volume of file transfers and provides high availability and durability. You do not need to provision, manage, or patch any servers or load balancers.
Option B is not correct because Amazon S3 File Gateway is not an SFTP server. It is a hybrid cloud storage service that provides a local file system interface to S3. You can use it to store and retrieve files as objects in S3 using standard file protocols such as NFS and SMB. However, it does not support SFTP protocol, and it requires deploying a file gateway appliance on-premises or on EC2.
Option C is not cost-effective or scalable because it requires launching and managing an EC2 instance in a private subnet and setting up a VPN connection for the new partner. This would incur additional costs for the EC2 instance, the VPN connection, and the data transfer. It would also introduce complexity and security risks to the solution. Moreover, it would require running a cron job script on the EC2 instance to upload files to the S3 data lake, which is not efficient or reliable.
Option D is not cost-effective or scalable because it requires launching and managing multiple EC2 instances in a private subnet and placing a NLB in front of them. This would incur additional costs for the EC2 instances, the NLB, and the data transfer. It would also introduce complexity and security risks to the solution.
Moreover, it would require running a cron job script on the EC2 instances to upload files to the S3 data lake, which is not efficient or reliable. References:
What Is AWS Transfer Family?
What Is Amazon S3 File Gateway?
What Is Amazon EC2?
[What Is Amazon Virtual Private Cloud?]
[What Is a Network Load Balancer?]

Question 2

A company that operates a web application on premises is preparing to launch a newer version of the application on AWS. The company needs to route requests to either the AWS-hosted or the on-premises-hosted application based on the URL query string. The on-premises application is not available from the internet, and a VPN connection is established between Amazon VPC and the company's data center.
The company wants to use an Application Load Balancer (ALB) for this launch.
Which solution meets these requirements?

A.Use one ALB with two AWS Auto Scaling groups: one for the AWS resource and one for on premises.Add hosts to each Auto Scaling group. Route with Amazon Route 53 based on the URL query string.
B.Use two ALBs: one for on premises and one for the AWS resource. Add hosts to the target group of each ALB. Create a software router on an EC2 instance based on the URL query string.
C.Use two ALBs: one for on premises and one for the AWS resource. Add hosts to each target group of each ALB. Route with Amazon Route 53 based on the URL query string.
D.Use one ALB with two target groups: one for the AWS resource and one for on premises. Add hosts to each target group of the ALB. Configure listener rules based on the URL query string.

Question 3

If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should:

A.Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) already.
B.Assign a group of sequential Elastic IP address to the instances.
C.Launch the instances in the Amazon Virtual Private Cloud (VPC).
D.Launch the instances in a Placement Group.
E.Launch the instance from a private Amazon Machine Image (AMI).

Question 4

A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (Pll). The company stores the Pll data in the us-east-I Region and us-west-2 Region.
Which solution will meet these requirements with the LEAST operational overhead?

A.Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3_
B.Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3_
C.Configure Amazon Inspector to analyze the data that IS in Amazon S3.
D.Configure Amazon GuardDuty to analyze the data that is in Amazon S3.

Question 5

A company collects click-stream data from amazon EC2 instances that are in an auto scaling group. The age data feeds a centralized dashboard and is critical to the company's business. Which method will help ensure data is collected before an auto scaling policy terminates an instance from the auto scaling group?

A.Snapshot the Amazon EC2 instance Elastic Block Store volumes
B.Use Auto Scaling lifecycle hooks
C.Implement Amazon kinesis as a log collector
D.Trigger Amazon S3 event notifications

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File