A company is running a multi-tier recommence web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ OB instance. Amazon ROS is configured with the latest generation DB instance with 2.000 GB of storage In a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBSl volume. The database performance affects the application during periods high demand.
A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20.000.
What should a solutions architect do to improve the application performance?

• A.Increase the number of IOPS on the gp3 volume.
• B.Replace the volume with a Provisioned IOPS SSD (Io2) volume.
• C.Replace the 2.000 GB gp3 volume with two 1.000 GB gp3 volumes
• D.Replace the volume with a magnetic volume.

Comment: *

Name: *

Email: *

Verification: *

A company is running a multi-tier web application farm in a virtual private cloud (VPC) that is not connected to their corporate network. They are connecting to the VPC over the Internet to manage the fleet of Amazon EC2 instances running in both the public and private subnets. The Solutions Architect has added a bastion host with Microsoft Remote Desktop Protocol (RDP) access to the application instance security groups, but the company wants to further limit administrative access to all of the instances in the VPC.
Which of the following bastion host deployment options will meet this requirement?

• A.Deploy a Windows Bastion host on the corporate network that has RDP access to all EC2 instances in the VPC.
• B.Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow RDP access to bastion only from the corporate IP addresses.
• C.Deploy a Windows Bastion host with an Elastic IP address in the private subnet, and restrict RDP access to the bastion from only the corporate public IP addresses.
• D.Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow SSH access to the bastion from anywhere.

Correct Answer: B

The correct answer is to deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow RDP access to bastion only from the corporate IP addresses.
A bastion host is a special purpose computer on a network specifically designed and configured to withstand attacks. If you have a bastion host in AWS, it is basically just an EC2 instance. It should be in a public subnet with either a public or Elastic IP address with sufficient RDP or SSH access defined in the security group. Users log on to the bastion host via SSH or RDP and then use that session to manage other hosts in the private subnets.

Deploying a Windows Bastion host on the corporate network that has RDP access to all EC2 instances in the VPC is incorrect since you do not deploy the Bastion host to your corporate network. It should be in the public subnet of a VPC.
Deploying a Windows Bastion host with an Elastic IP address in the private subnet, and restricting RDP access to the bastion from only the corporate public IP addresses is incorrect since it should be deployed in a public subnet, not a private subnet.
Deploying a Windows Bastion host with an Elastic IP address in the public subnet and allowing SSH access to the bastion from anywhere is incorrect. Since it is a Windows bastion, you should allow RDP access and not SSH as this is mainly used for Linux-based systems.
Reference:
https://docs.aws.amazon.com/quickstart/latest/linux-bastion/architecture.html Check out this Amazon VPC Cheat Sheet:
https://tutorialsdojo.com/amazon-vpc/

Comment: *

Name: *

Email: *

Verification: *

An ecommerce application uses a PostgreSQL database that runs on an Amazon EC2 instance. During a monthly sales event, database usage increases and causes database connection issues for the application. The traffic is unpredictable for subsequent monthly sales events, which impacts the sales forecast. The company needs to maintain performance when there is an unpredictable increase in traffic.
Which solution resolves this issue in the MOST cost-effective way?

• A.Migrate the PostgreSQL database to Amazon Aurora Serverless v2.
• B.Enable auto scaling for the PostgreSQL database on the EC2 instance to accommodate increased usage.
• C.Migrate the PostgreSQL database to Amazon RDS for PostgreSQL with a larger instance type
• D.Migrate the PostgreSQL database to Amazon Redshift to accommodate increased usage

Comment: *

Name: *

Email: *

Verification: *

An ecommerce company needs to run a scheduled daily job to aggregate and filler sales records for analytics.
The company stores the sales records in an Amazon S3 bucket. Each object can be up to 10 G6 in size Based on the number of sales events, the job can take up to an hour to complete. The CPU and memory usage of the fob are constant and are known in advance.
A solutions architect needs to minimize the amount of operational effort that is needed for the job to run.
Which solution meets these requirements?

• A.Create an Amazon Elastic Container Service (Amazon ECS) duster with an Amazon EC2 launch type and an Auto Scaling group with at least one EC2 instance. Create an Amazon EventBridge scheduled event that launches an ECS task on the duster to run the job.
• B.Create an AWS Lambda function that has an Amazon EventBridge notification Schedule the EventBridge event to run once a day
• C.Create an AWS Lambda function Create an Amazon API Gateway HTTP API, and integrate the API with the function Create an Amazon EventBridge scheduled avert that calls the API and invokes the function.
• D.Create an Amazon Elastic Container Service (Amazon ECS) duster with an AWS Fargate launch type.
  Create an Amazon EventBridge scheduled event that launches an ECS task on the cluster to run the job.

Comment: *

Name: *

Email: *

Verification: *

A company has a multi-tier payment processing application that is based on virtual machines (VMs). The communication between the tiers occurs asynchronously through a third-party middleware solution that guarantees exactly-once delivery.
The company needs a solution that requires the least amount of infrastructure management. The solution must guarantee exactly-once delivery for application messaging Which combination of actions will meet these requirements? (Select TWO.)

• A.Use AWS Lambda for the compute layers in the architecture.
• B.Use Amazon EC2 instances for the compute layers in the architecture.
• C.Use Amazon Simple Notification Service (Amazon SNS) as the messaging component between the compute layers.
• D.Use Amazon Simple Queue Service (Amazon SQS) FIFO queues as the messaging component between the compute layers.
• E.Use containers that are based on Amazon Elastic Kubemetes Service (Amazon EKS) for the compute layers in the architecture.

Comment: *

Name: *

Email: *

Verification: *