A company has an application that calls AWS Lambda functions A recent code review found database credentials stored in the source code The database credentials need to be removed from the Lambda source code The credentials must then be securely stored and rotated on an ongoing basis to meet security policy requirements What should a solutions architect recommend to meet these requirements?

• A.Store the password in AWS Secrets Manager Associate the Lambda function with a role that can retrieve the password from Secrets Manager given its secret ID
• B.Store the password in AWS Key Management Service (AWS KMS) Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID
• C.Move the database password to an environment variable associated with the Lambda function Retrieve the password from the environment variable upon execution
• D.Store the password in AWS CloudHSM Associate the Lambda function with a role that can retrieve the password from CloudHSM given its key ID

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is designing a new architecture that will use an Amazon EC2 Auto Scaling group.
Which of the following factors determine the health check grace period? (Select TWO.)

• A.How long it takes for the Auto Scaling group to detect a failure.
• B.How much of the application code is embedded in the AMI.
• C.How frequently the Auto Scaling group scales up or down.
• D.How long the bootstrap script takes to run.
• E.How many Amazon CloudWatch alarms are configured for status checks.

Comment: *

Name: *

Email: *

Verification: *

A solutions architect is designing an application for a two-step order process The first step is synchronous and must return to the user with little latency The second step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are received How should the solutions architect integrate these components?

• A.Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic
• B.Use an Amazon SQS FIFO queues
• C.Create an SNS topic and subscribe an Amazon SQS Standard queue to that topic.
• D.Use an AWS Lambda function along with Amazon SQS standard queues

Comment: *

Name: *

Email: *

Verification: *

An on-premises application will be migrated to the cloud. The application consists of a single Elasticsearch virtual machine with data source feeds from local systems that will not be migrated, and a Java web application on Apache Tomcat running on three virtual machines. The Elasticsearch server currently uses 1 TB of storage out of 16 TB available storage, and the web application is updated every 4 months. Multiple users access the web application from the Internet. There is a 10Gbit AWS Direct Connect connection established, and the application can be migrated over a schedules 48-hour change window.
Which strategy will have the LEAST impact on the Operations staff after the migration?

• A.Use the AWS SMS to replicate the virtual machines into AWS. When the migration is complete, pause the data source feeds and start the migrated Elasticsearch and web application instances. Place the web application instances behind a public Elastic Load Balancer. Move the data source feeds to the new Elasticsearch server and move users to the new web Application Load Balancer.
• B.Create an Elasticsearch server on Amazon EC2 right-sized with 2 TB of Amazon EBS and a public AWS Elastic Beanstalk environment for the web application. Pause the data sources, export the Elasticsearch index from on premises, and import into the EC2 Elasticsearch server. Move data source feeds to the new Elasticsearch server and move users to the web application.
• C.Create an Amazon ES cluster for Elasticsearch and a public AWS Elastic Beanstalk environment for the web application. Pause the data source feeds, export the Elasticsearch index from on premises, and import into the Amazon ES cluster. Move the data source feeds to the new Amazon ES cluster endpoint and move users to the new web application.
• D.Create an Amazon ES cluster for Elasticsearch and a public AWS Elastic Beanstalk environment for the web application. Use AWS DMS to replicate Elasticsearch data. When replication has finished, move data source feeds to the new Amazon ES cluster endpoint and move users to the new web application.

Comment: *

Name: *

Email: *

Verification: *

A company is using Amazon S3 as its local repository for weekly analysis reports One of the company-wide requirements is to secure data at rest using encryption. The company chooses Amazon 53 server-side encryption (SSE) how can the object be decrypted when a GET request is issued?

• A.Amazon S3 provides a server-side key for decrypting the object
• B.Amazon S3 manages encryption and decryption automatically
• C.The user needs to decrypt the object using a private Key
• D.the user needs a Put request to decrypt the object

Comment: *

Name: *

Email: *

Verification: *