Tüm alıştırma soruları

A SaaS provider is migrating its core multi-tenant application to AWS and requires a PostgreSQL-compatible database. The database architecture must guarantee high availability within a single AWS Region, with a Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of near zero (under 1 second). Which database configuration meets these requirements with the lowest operational overhead?

A company runs an internal reporting application on Amazon EC2 instances in a private subnet. The application must connect to an external third-party API service on the internet to retrieve data daily over HTTPS (TCP port $443$). A solutions architect has already deployed a NAT Gateway in a public subnet and configured the private subnet's route table to route internet traffic ($0.0.0.0/0$) to the NAT Gateway. The company requires using a custom Network Access Control List (NACL) on the private subnet to restrict outbound traffic to only this API service, whose public IP address is $203.0.113.50$. Which two configurations must be added to the custom NACL to allow this communication while maintaining the principle of least privilege? (Select TWO.)

A media production company hosts a shared file repository on-premises for video editing. The company wants to migrate its storage to AWS to improve resiliency and high availability while maintaining low-latency access for on-premises editors. The design requirements include a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 10 minutes for accessing archived footage. Which of the following solutions should a solutions architect recommend?

An enterprise is migrating a large-scale data analytics platform to AWS. The platform requires a hybrid network connection to synchronize transactional logs from an on-premises mainframe to multiple Amazon VPCs in the same Region. The synchronization process requires a minimum bandwidth of $3\text{ Gbps}$ and must be encrypted in transit. Due to tight project timelines, the solution must be deployed within a few days, ruling out the provisioning of a new AWS Direct Connect connection. Which network architecture will meet these requirements with the highest performance and scalability?

A healthcare provider is deploying a critical patient record application using Amazon RDS for MySQL. The database tier must withstand an Availability Zone (AZ) failure with zero data loss ($RPO = 0$) and support automatic failover in less than $45\text{ seconds}$ ($RTO < 45\text{ s}$). The application also requires horizontal scaling of read operations to prevent reporting dashboards from affecting the write performance of the primary database instance. Which database configuration meets these requirements with the least operational complexity?

A global legal technology platform hosts sensitive litigation documents consisting of scanned court files. The documents must be stored with $99.999999999\%$ (11 nines) of durability. The platform must maintain a disaster recovery plan across two AWS regions (primary and secondary) with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 15 minutes for its storage tier. The files are frequently accessed during the first 30 days of active litigation, after which access drops significantly; however, any document must remain retrievable within milliseconds when requested. Which storage architecture meets these requirements with the lowest operational overhead?

A financial technology firm is deploying a transaction auditing application on Amazon EC2 instances distributed across two Availability Zones in the eu-west-1 Region. The application requires a shared, POSIX-compliant file system to store transaction journals. The architecture must survive the complete loss of an Availability Zone with zero data loss (RPO = 0) and continue serving requests without manual intervention. Additionally, the journals must be replicated to the eu-central-1 Region with a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 10 minutes. Which storage design meets these requirements while minimizing operational overhead?

An international logistics company uses a critical PostgreSQL-compatible transactional database on AWS. The application demands high availability within its primary AWS Region ($eu-west-1$) with a Recovery Time Objective (RTO) of less than $60\text{ seconds}$ and a Recovery Point Objective (RPO) of $0$ (no data loss) in the event of an Availability Zone outage. Additionally, the company requires a cross-region disaster recovery (DR) architecture in $eu-central-1$ that supports an RPO of less than $5\text{ seconds}$ and an RTO of less than $15\text{ minutes}$. Which combination of database configurations will satisfy these requirements? (Select TWO.)

A software development company is migrating a collaborative code compilation platform to AWS. The platform runs on a fleet of Amazon EC2 instances distributed across multiple Availability Zones. The build workers require concurrent, shared access to a POSIX-compliant repository. The repository must support sub-millisecond latencies for file metadata operations and scale throughput dynamically to handle build bursts. Which two storage configurations should the solutions architect recommend to meet these requirements?

A healthcare provider hosts a web application where medical imaging files must be stored. The storage solution must allow multiple web servers running on Amazon EC2 instances in different Availability Zones to read and write to the files simultaneously. In the event of an Availability Zone outage, the storage must remain available with a Recovery Time Objective (RTO) of zero. Which storage solution meets these requirements with the least configuration effort?

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB) in a single AWS Region. Users from multiple locations worldwide are experiencing high latency and inconsistent performance when accessing the application. The solutions architect needs to optimize the network routing to provide the lowest possible latency and most consistent performance for these global users. Which solution should the solutions architect recommend?

A pharmaceutical company is designing a disaster recovery architecture for its genomic drug simulation datasets. The active datasets are stored in Amazon S3 in the `us-east-1` Region and are critical to clinical trial validation. Compliance mandates that these datasets must be replicated to a secondary AWS Region (`us-west-2`). The solution must guarantee a Recovery Point Objective (RPO) of $15\text{ minutes}$ and a Recovery Time Objective (RTO) of $30\text{ minutes}$ for read access to the replicated datasets in `us-west-2`. The replication mechanism must be asynchronous to prevent any performance impact on the primary simulation engines in `us-east-1`. Which configuration will meet these storage requirements?

A company needs to replicate large database backups from its on-premises data center to a VPC on AWS. The replication software requires a consistent network throughput of at least $2\text{ Gbps}$. The company wants to establish a secure, encrypted hybrid connection over the public internet, avoiding the lead time of dedicated physical circuits. Which network architecture should a solutions architect recommend to meet these requirements?

A solutions architect is designing a secure architecture for a financial application. The application's database runs on Amazon EC2 instances with Amazon EBS volumes, and it accesses an external API using an API key. The company's security policy mandates that:

1. All EBS volumes must be encrypted at rest, and the encryption keys must rotate annually without requiring manual data re-encryption or causing downtime.
2. The external API key must be stored securely, rotate automatically every 30 days, and not be exposed in plaintext in any configuration files.

Which combination of actions should the solutions architect take to meet these security requirements? (Select TWO.)

An application runs on Amazon EC2 instances within a private subnet ($10.100.1.0/24$). The application must query an Amazon RDS PostgreSQL database located in a dedicated database subnet ($10.100.2.0/24$). Additionally, the application must securely retrieve database credentials from AWS Secrets Manager without accessing the public internet. The solutions architect needs to configure network security controls to allow only the necessary traffic flows.

Which TWO configurations should the solutions architect implement to meet these requirements securely? (Select TWO.)

A solutions architect is configuring security policies for a critical financial application. The application stores its transaction logs in an Amazon S3 bucket, encrypted at rest using an AWS KMS customer managed key. The solutions architect enables automatic key rotation for the customer managed key. Which two statements correctly describe the behavior of AWS KMS and the S3 bucket after the key is rotated? (Select two.)

A financial services company is deploying a two-tier application inside a virtual private cloud (VPC). The application consists of backend processing Amazon EC2 instances running in Subnet A ($172.16.1.0/24$) and a PostgreSQL database instance running in Subnet B ($172.16.2.0/24$). The backend instances need to access the database on TCP port $5432$, but all other traffic between the subnets must be blocked. The company requires a defense-in-depth network security architecture using both Security Groups and Network ACLs (NACLs). Which TWO configuration steps should the solutions architect perform to meet these security requirements?

An enterprise is migrating a legacy reporting system to AWS. The backend processing servers run on Amazon EC2 instances in a private subnet. These instances must securely fetch configuration files from a private Amazon S3 bucket and connect to a third-party payment gateway API on the public internet. The solutions architect needs to design the network security controls to satisfy these requirements with minimum exposure and without incurring NAT Gateway data transfer costs for Amazon S3 traffic. Which combination of actions should the solutions architect take to meet these requirements? (Select TWO.)

A company runs a critical application on Amazon EC2 instances in a private subnet within a VPC. The subnet has no route to the internet. The application must access AWS Key Management Service (AWS KMS) to decrypt sensitive configuration files. To comply with security policies, the traffic must not traverse the public internet, and access must be restricted using the principle of least privilege. The solutions architect deploys an interface VPC endpoint for AWS KMS. Which combination of security group configurations will meet these requirements?

An organization is deploying a microservices-based application where a backend service runs on Amazon EC2 instances in a private subnet. An integration proxy instance in the public subnet of the same VPC needs to forward incoming customer requests to these backend instances. The company's security policy requires that the backend instances must not be allowed to initiate any outbound connections to the internet or other subnets, but they must be able to receive requests from the integration proxy and return the responses. Which configuration should a solutions architect implement to meet these security requirements?