An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The company's CIO has asked a Solutions Architect to design a simple, highly available, and loosely coupled order processing application. The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays.
Which of the following is the MOST reliable approach to meet the requirements?

• A.Receive the orders in an Amazon SQS queue and trigger an AWS Lambda function to process them.
• B.Receive the orders using the AWS Step Functions program and trigger an Amazon ECS container to process them.
• C.Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them.
• D.Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them.

Comment: *

Name: *

Email: *

Verification: *

An education company Is running a web application used by college students around the world The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB) A system administrator detects a weekly spike In the number of failed login attempts which overwhelm the application's authentication service. All the tailed login attempts originate from about 500 different IP addresses that change each week. A solutions architect must prevent the tailed login attempts from overwhelming the authentication service Which solution meets these requirements with the MOST operational efficiency?

• A.Create an AWS WAF web ACL with a rate-based rule and set the rule action to Block Connect the web ACL to the ALB
• B.Use AWS Firewall Manager To create a security group and security group policy to allow access only to specific CIDR ranges
• C.Create an AWS WAF web ACL with an IP set match rule, and set the rule action to Block Connect the web ACL to the ALB
• D.Use AWS Firewall Manager to create a security group and security group policy to deny access from the IP addresses

Comment: *

Name: *

Email: *

Verification: *

A company recently completed a large-scale migration to AWS Development teams that support various business units have their own accounts in AWS Organizations. A central cloud team is responsible for controlling which services and resources can be accessed, and for creating operational strategies for all teams with the company. Some teams are approaching their account service quotas. The cloud team needs to create an automated and operationally efficient solution to proactively monitor service quotas.
Monitoring should account every 15 minutes and send alerts when a team exceeds 80% utilization.
Which solution will meet these requirements?

• A.Create a scheduled AWS Config rule to trigger an AWS Lambada function to call the GetServiceQuota API. If any service utilization is above 80%, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the cloud team. Create an AWS CloudFormation template and deploy the necessary resources to each account.
• B.Create an Amazon EvenBridge (Amazon CloudWatch Events) rule that triggers an AWS Lambada function to refresh the AWS Trusted Advisor service limit checks and retrieve the most current utilization and service limit data. If the current utilization is above 80% puclish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the cloud team. Create AWS CloudFormation StackSets that deploy the necessary resources to all Organizations accounts.
• C.Create an Amazon CloudWatch alarm that triggers an AWS Lambada function to call the Amazon CloudWatch GettingSightRuleReport. API to retrieve the most current utilization and service limit data if the current utilization is above 80%, publish an Amazon Simple Email Service (Amazon SES) notification to alert the cloud team. Create AWS CloudFormation SrackSets that deploy the necessary resource to all Organizations accounts.
• D.Create an Amazon EvenBridge (Amazon CloudWatch Events) rule that triggers an AWS Lambda function to refresh the AWS Trusted Advisor service limit checks and retrieve the most current utilization and service limit data. IF the current utilization is above 80% use Amazon Pinpoint to send an alert to the cloud team. Create an AWS CloudFormation template and deploy the necessary resources to each account.

Comment: *

Name: *

Email: *

Verification: *

A company wants to migrate its website from an on-premises data center onto AWS. At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency. The company's security policy states that privileges and network permissions must be configured according to best practice, using least privilege.
A Solutions Architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster.
What steps are required after the deployment to meet the requirements? (Choose two.)

• A.Create tasks using the bridge network mode.
• B.Create tasks using the awsvpc network mode.
• C.Apply security groups to Amazon EC2 instances, and use IAM roles for EC2 instances to access other resources.
• D.Apply security groups to the tasks, and pass IAM credentials into the container at launch time to access other resources.
• E.Apply security groups to the tasks, and use IAM roles for tasks to access other resources.

Comment: *

Name: *

Email: *

Verification: *

A Development team is deploying new APIs as serverless applications within a company. The team is currently using the AWS Management Console to provision Amazon API Gateway, AWS Lambda, and Amazon DynamoDB resources. A Solutions Architect has been tasked with automating the future deployments of these serverless APIs.
How can this be accomplished?

• A.Use AWS CloudFormation with a Lambda-backed custom resource to provision API Gateway. Use the AWS::DynamoDB::Table and AWS::Lambda::Function resources to create the Amazon DynamoDB table and Lambda functions. Write a script to automate the deployment of the CloudFormation template.
• B.Commit the application code to the AWS CodeCommit code repository. Use AWS CodePipeline and connect to the CodeCommit code repository. Use AWS CodeBuild to build and deploy the Lambda functions using AWS CodeDeploy. Specify the deployment preference type in CodeDeploy to gradually shift traffic over to the new version.
  https://aws-quickstart.s3.amazonaws.com/quickstart-trek10-serverless-enterprise-cicd/doc/serverless-cicd-for-the-enterprise-on-the-aws-cloud.pdf
  https://aws.amazon.com/quickstart/architecture/serverless-cicd-for-enterprise/
• C.Use the AWS Serverless Application Model to define the resources. Upload a YAML template and application files to the code repository. Use AWS CodePipeline to connect to the code repository and to create an action to build using AWS CodeBuild. Use the AWS CloudFormation deployment provider in CodePipeline to deploy the solution.
• D.Use AWS CloudFormation to define the serverless application. Implement versioning on the Lambda functions and create aliases to point to the versions. When deploying, configure weights to implement shifting traffic to the newest version, and gradually update the weights as traffic moves over.

Comment: *

Name: *

Email: *

Verification: *