A media storage application uploads user photos to Amazon S3 for processing. End users are reporting that some uploaded photos are not being processed properly. The Application Developers trace the logs and find that AWS Lambda is experiencing execution issues when thousands of users are on the system simultaneously.
Issues are caused by:
* Limits around concurrent executions.
* The performance of Amazon DynamoDB when saving data.
Which actions can be taken to increase the performance and reliability of the application? (Choose two.)

• A.Configure a dead letter queue that will reprocess failed or timed-out Lambda functions.
• B.Evaluate and adjust the write capacity units (WCUs) for the DynamoDB tables.
• C.Evaluate and adjust the read capacity units (RCUs) for the DynamoDB tables.
• D.Add an Amazon ElastiCache layer to increase the performance of Lambda functions.
• E.Use S3 Transfer Acceleration to provide lower-latency access to end users.

Comment: *

Name: *

Email: *

Verification: *

A medical company is tunning a REST API on a set of Amazon EC2 instances. The EC2 instances tun in an Auto Scaling group behind an Application Load Balancer (ALB). The ALB tuns in thtee public subnets, and the EC2 instances run in thtee private subnets. The company has deployed an Amazon CloudFront distribution that has the AL8 as the only origin.
Which solution should a solutions architect recommend to enhance the origin security?

• A.Configure AWS Shield Advanced. Create a security group policy to allow connections from CloudFront service IP address ranges. Add the policy to AWS Shield Advanced, and attach the policy to the ALB.
• B.Store a random string in AWS Systems Manager Parameter Store. Configure Parameter Store automatic rotation for the string. Configure CloudFront to inject the random siring as a custom HTTP header for the origin request. Inspect the value of the custom HTTP header, and block access in the ALB.
• C.Store a random string in AWS Secrets Manager. Create an AWS Lambda (unction for automatic secret rotation. Configute CloudFront to inject the random string as a custom HTTP header for the origin request. Create an AWS WAF web ACL rule with a string match rule for the custom header. Associate the web ACL with the AL8.
• D.Create an AWS WAF web ACL rule with an IP match condition of the CloudFront service IP address ranges. Associate the web ACL with the ALB. Move the ALB into the three private subnets.

Comment: *

Name: *

Email: *

Verification: *

A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight. Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?

• A.Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens.
• B.Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.
• C.Implement a target tracking action triggered at a lower CPU threshold, and decrease the cooldown period.
• D.Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens.

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is designing a network solution for a company that has applications running in a data center in Northern Virgini a. The applications in the company's data center require predictable performance to applications running in a virtual private cloud (VPC) located in us-east-1, and a secondary VPC in us-west-2 within the same account. The company data center is collocated in an AWS Direct Connect facility that serves the us-est-1 region. The company has already ordered an AWS Direct Connect connection and a cross-connect has been established.
Which solution will meet the requirements at the LOWEST cost?

• A.Provision a Direct Connect gateway and attach the virtual private (VGW) for the VPC in us-east-1 and the VGW for the VPC in us-west-2. Create a private VIF on the Direct Connect connection and associate it to the Direct Connect gateway.
• B.Create private VIFs on the Direct Connect connection for each of the company's VPCs in the us-est-1 and us-west-2 regions. Configure the company's data center router to connect directly with the VPCs in those regions via the private VIFs.
• C.Deploy a transit VPC solution using Amazon EC2-based router instances in the us-east-1 region. Establish IPsec VPN tunnels between the transit routers and virtual private gateways (VGWs) located in the us-east-1 and us-west-2 regions, which are attached to the company's VPCs in those regions. Create a public VIF on the Direct Connect connection and establish IPsec VPN tunnels over the public VIF between the transit routers and the company's data center router.
• D.Order a second Direct Connect connection to a Direct Connect facility with connectivity to the us-west-2 region. Work with partner to establish a network extension link over dark fiber from the Direct Connect facility to the company's data center. Establish private VIFs on the Direct Connect connections for each of the company's VPCs in the respective regions. Configure the company's data center router to connect directly with the VPCs in those regions via the private VIFs.

Comment: *

Name: *

Email: *

Verification: *

An organization is setting up a highly scalable application using Elastic Beanstalk. The organization is using ELB and RDS with VPC. The organization has public and private subnets within the cloud.
Which of the below mentioned configurations will not work in this scenario?

• A.To setup RDS in a private subnet and ELB in a public subnet.
• B.The configuration must have public and private subnets in the same AZ.
• C.The configuration must have two private subnets in separate AZs.
• D.The EC2 instance should have a public IP assigned to it.

Comment: *

Name: *

Email: *

Verification: *