An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about
300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.
Which solution meets these requirements MOST cost-effectively?

• A.Amazon OpenSearch Service (Amazon Elasticsearch Service)
• B.Amazon S3 Glacier
• C.Amazon S3 Standard
• D.Amazon RDS for PostgreSQL

Comment: *

Name: *

Email: *

Verification: *

A company uses Amazon S3 to host a web application. Currently, the company uses a continuous integration tool running on an Amazon EC2 instance that builds and deploys the application by uploading it to an S3 bucket. A Solutions Architect needs to enhance the security of the company's platform with the following requirements:
* A build process should be run in a separate account from the account hosting the web application.
* A build process should have minimal access in the account it operates in.
* Long-lived credentials should not be used.
As a start, the Development team created two AWS accounts: one for the application named web account process; other is a named build account.
Which solution should the Solutions Architect use to meet the security requirements?

• A.In the build account, create a new IAM user. Store the access key and secret access key in AWS Secrets Manager. Modify the continuous integration process to perform a lookup of the IAM user credentials from Secrets Manager. Create an IAM policy to allow s3: PutObject calls on the S3 bucket in the web account, and attack it to the user. In the web account, create an S3 bucket policy attached to the S3 bucket that allows the newly created IAM user to use s3:PutObject calls.
• B.In the build account, create a new IAM role, which can be assumed by Amazon EC2 only. Attach the role to the EC2 instance running the continuous integration process. Create an IAM policy to allow s3: PutObject calls on the S3 bucket in the web account. In the web account, create an S3 bucket policy attached to the S3 bucket that allows the build account to use s3:PutObject calls.
• C.In the build account, create a new IAM role, which can be assumed by Amazon EC2 only. Attach the role to the EC2 instance running the continuous integration process. Create an IAM policy to allow s3: PutObject calls on the S3 bucket in the web account. In the web account, create an S3 bucket policy attached to the S3 bucket that allows the newly created IAM role to use s3:PutObject calls.
• D.In the build account, modify the continuous integration process to perform a lookup of the IAM user credentials from AWS Secrets Manager. In the web account, create a new IAM user. Store the access key and secret access key in Secrets Manager. Attach the PowerUserAccess IAM policy to the IAM user.

Comment: *

Name: *

Email: *

Verification: *

After launching an instance that you intend to serve as NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?

• A.Attaching a second Elastic Network Interface to the NAT instance, and placing it in the private subnet
• B.Attaching a second Elastic Network Interface(ENI) to the instance in the private subnet, and placing it in the public subnet
• C.Disabling the Source/Destination check attribute on the NAT instance
• D.Attaching an Elastic IP address to the instance in the private subnet

Comment: *

Name: *

Email: *

Verification: *

A company hosts an application on multiple Amazon EC2 instances The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table The SQS queue does not contain any duplicate messages What should a solutions archived do to ensure messages are being processed once only?

• A.Use the ChangeMessageVisibility API call to increase the visibility timeout
• B.Use the ReceiveMessage API call to set an appropriate wait time.
• C.Use the AddPermission API call to add appropriate permissions
• D.Use the CreateQueue API call to create a new queue

Comment: *

Name: *

Email: *

Verification: *

A solutions architect is designing a new service behind Amazon API Gateway The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth Data can be queried using simple key-value requests Which combination of AWS services would meet these requirements? (Select TWO )

• A.AWS Fargate
• B.AWS Lambda
• C.Amazon DynamoDB
• D.Amazon EC2 Auto Scaling
• E.MySQL-compatible Amazon Aurora

Comment: *

Name: *

Email: *

Verification: *