Tüm alıştırma soruları

A company is designing a new integration between two workloads deployed in separate AWS accounts. An application running on Amazon EC2 instances in Account A (111111111111) needs to retrieve and process encrypted messages from an Amazon Simple Queue Service (Amazon SQS) queue located in Account B (222222222222). The security requirements state that the SQS queue must be encrypted at rest, and access must follow the principle of least privilege. The application's IAM role in Account A has already been configured with the necessary SQS and KMS permissions.

Which two configuration steps must be performed in Account B to allow the cross-account application to successfully receive and decrypt messages from the queue? (Select TWO.)

An enterprise is designing a hybrid network connectivity solution to connect its 25 spoke VPCs in a single AWS Region with its on-premises corporate network. The design requires a highly available, transit hub architecture where spoke VPCs can communicate with each other and with the on-premises network. The primary hybrid connection must use an AWS Direct Connect (DX) connection, and a Site-to-Site VPN connection must serve as a backup path. The system must automatically fail over to the backup VPN path if the DX connection becomes unavailable, without adding unnecessary routing tables or manual intervention.

Which TWO actions should the solutions architect take to implement this architecture?

A regional public transit authority is launching a mobile ticketing application to support commuters during a city-wide cultural festival. The authority expects an immediate traffic burst where active user sessions will surge from $500$ to over $80,000$ within a $5$-minute window. The backend application runs on Amazon EC2 instances inside an Auto Scaling group behind an Application Load Balancer (ALB), with transactional data stored in a Multi-AZ Amazon RDS for PostgreSQL database. High-frequency queries retrieve transit schedule data which changes daily. Which architecture optimization strategy should a Solutions Architect recommend to handle this sudden traffic spike while maintaining low-latency read operations?

An application hosted on Amazon EC2 instances uses General Purpose SSD (gp2) EBS volumes. During a daily batch reporting process, write operations experience significant latency. CloudWatch metrics indicate that the volumes are consistently hitting their baseline IOPS limit and exhausting their burst balance. Which of the following is the most cost-effective action to resolve the storage performance bottleneck with the least administrative effort?

A financial services company hosts a high-frequency transactional application in the us-east-1 region. The application components are distributed across two VPCs: a transaction processing VPC and a ledger database VPC. The VPCs are currently interconnected using an AWS Transit Gateway. During high-volume trading hours, the network latency between the transaction processing application and the ledger database increases, leading to transaction timeouts. The database replication requires maximum throughput and the lowest possible latency. Which network architecture modification will optimize the network performance and reduce latency for this inter-VPC traffic?

An organization is running a legacy application on Amazon EC2 instances. The CloudWatch agent is configured to collect application logs from a static path of /var/log/app/app.log. The application rotates its logs hourly by renaming the active log file to /var/log/app/app.log.YYYY-MM-DD-HH and creating a new empty /var/log/app/app.log file. The operations team notices that the CloudWatch agent ceases log ingestion after the first log rotation occurs. Which configuration change will resolve this issue and ensure continuous log ingestion?

An enterprise is designing a deployment pipeline for a new microservice backend consisting of Amazon API Gateway and AWS Lambda. The deployment pipeline must release updates to the Lambda function according to the following requirements:

- The new version must receive exactly $10\%$ of the incoming API traffic immediately upon deployment.
- The remaining $90\%$ of the traffic must be routed to the new version after a $10$-minute stabilization period.
- If the new version experiences elevated error rates or response latencies during this $10$-minute window, the traffic must automatically and immediately revert to the previous stable version.

Which two actions should the solutions architect combine to design this deployment strategy? (Select two.)

A company is designing a new web application in a single VPC across two Availability Zones: us-east-1a and us-east-1b. The application consists of web servers in public subnets and database servers in private subnets. The database servers must download software patches from the internet, and the design must remain resilient to a single Availability Zone outage. Which configuration meets these requirements?

An enterprise application runs on Amazon EC2 instances within an Auto Scaling group. The application writes logs to `/var/log/app/output.log`. Every hour, a cron job rotates the log file by renaming the active file to `/var/log/app/output.log.YYYY-MM-DD-HH` and creating a new empty `/var/log/app/output.log` file. The CloudWatch agent is configured on the instances to stream `/var/log/app/output.log` to a CloudWatch Logs group. However, after the first hourly log rotation occurs, the operations team notices that new log entries are no longer delivered to CloudWatch until the CloudWatch agent is restarted. Which configuration change in the CloudWatch agent configuration file is required to resolve this issue and ensure continuous log delivery?

An enterprise financial platform operates its core transaction processing engine in private subnets across $3$ Availability Zones in the `us-east-1` Region. The workloads must satisfy three networking requirements:

1. Establish high-throughput, low-latency communication with a database cluster located in a separate VPC within the same Region.
2. Query external credit-scoring APIs via the internet with a target latency of less than $50\text{ ms}$ and high availability.
3. Resolve private DNS hostnames for utility resources hosted in a shared services VPC.

Currently, all private subnets route internet-bound traffic through a single NAT Gateway located in Availability Zone `us-east-1a`, a Transit Gateway is used for VPC-to-VPC routing, and the Route 53 Private Hosted Zones (PHZs) are associated only with the shared services VPC. During high-volume trading hours, users experience query timeouts, increased latency, and host resolution failures.

Which combination of actions will resolve the bottlenecks and optimize network performance?

A company runs a batch processing application on a fleet of Amazon EC2 instances using gp2 Amazon EBS volumes. The application's database backend is hosted on an Amazon RDS for PostgreSQL Multi-AZ DB instance. The solutions architect needs to optimize both compute and storage performance for this existing solution while keeping administrative effort low. Which of the following recommendations should the solutions architect implement? (Select TWO.)

An enterprise wants to centralize API activity logs across all AWS accounts in their AWS Organization. A solutions architect configures an organization trail in the management account to deliver logs to a centralized Amazon S3 bucket located in a dedicated security account. The S3 bucket uses Amazon S3 managed keys (SSE-S3) for encryption. Although the organization trail is successfully created, the operations team reports that no log files are being delivered to the S3 bucket. Which of the following is the most likely cause of this issue?

A geophysics research firm runs a seismic data processing pipeline on AWS. The pipeline consists of a fleet of Amazon EC2 instances in an Auto Scaling group (ASG) that ingest sensor telemetry logs, perform complex spatial transformations, write intermediate results to local scratch spaces, and update metadata in an Amazon RDS PostgreSQL DB instance. The processed datasets are ultimately uploaded to Amazon S3 for long-term research.

During daily calculation cycles, the solutions architect observes the following performance issues:
- The EC2 instances encounter severe disk write latency while writing intermediate sensor logs to local storage. The instances use Amazon EBS gp2 volumes, which frequently exhaust their I/O burst credits.
- The RDS PostgreSQL DB instance experiences high CPU utilization and query timeouts due to a sudden influx of read-heavy telemetry lookup queries.
- The final archive process to S3 fails with HTTP $503$ (Slow Down) errors when uploading thousands of small datasets concurrently to a single path: `s3://seismic-data-archive/raw-outputs/`.

Which two actions should the solutions architect take to resolve these performance bottlenecks? (Select two.)

A multinational retail corporation is designing a secure vendor inventory ingestion platform. Vendors must upload inventory catalogs from their respective AWS accounts directly to an Amazon S3 bucket located in the retailer's central Ingestion account. The retailer's security policy mandates that all data must be encrypted at rest using AWS KMS. The solutions architect initially configures default S3 bucket encryption using the AWS-managed S3 key (aws/s3). However, vendor IAM roles receive 'Access Denied' errors when attempting to upload objects, despite having explicit s3:PutObject permissions in their IAM policies and the S3 bucket policy. Which configuration change will resolve this issue while maintaining compliance with the security policy?

An energy grid management company runs a telemetry ingestion application on a fleet of Amazon EC2 instances. The application writes log files to `/var/log/grid/telemetry.log`. A cron job rotates these logs hourly, renaming the active file to `telemetry.log.YYYY-MM-DD-HH` and creating a new empty `telemetry.log` file. The operations team configured the unified CloudWatch agent to monitor the active `/var/log/grid/telemetry.log` file, but they notice that log entries written immediately before and during the rotation process are frequently missed in Amazon CloudWatch Logs. Which configuration change will resolve this issue while maintaining operational excellence?

A company runs a web application with a MySQL database hosted on Amazon RDS. The database is experiencing performance degradation due to a high volume of read and write requests for user session states. A solutions architect must improve database efficiency by moving the session state data to a dedicated caching layer. The caching solution must support multi-AZ replication to ensure session data is not lost if a primary cache node fails. Which caching and database optimization strategy should the solutions architect implement?

An enterprise is setting up a multi-account environment on AWS. A central Shared Services account contains a Route 53 Private Hosted Zone (PHZ) named `internal.infra` that hosts DNS records for shared infrastructure resources. Two new application VPCs, `vpc-app-dev` and `vpc-app-prod`, are deployed in separate AWS member accounts. The workloads in these application VPCs must resolve domain names within `internal.infra` with minimal latency and without exposing the traffic to the public internet. Which of the following approaches satisfies these requirements with the least operational complexity?

An enterprise SaaS company hosts a high-throughput reporting application. The application's web tier runs on Amazon EC2 instances in an Auto Scaling group (ASG) behind an Application Load Balancer (ALB). The database tier consists of an Amazon RDS for PostgreSQL DB instance in a Multi-AZ deployment on a $db.m6g.4xlarge$ instance with a $2\text{ TB}$ Provisioned IOPS SSD ($gp3$) storage volume configured at $12,000\text{ IOPS}$ and $500\text{ MB/s}$ throughput. During monthly billing cycles, tenants execute resource-intensive reporting queries, causing primary DB instance CPU utilization to reach $98\%$ and causing write transactions to fail due to lock contention and connection timeouts. The reporting queries require data that is no more than $5\text{ seconds}$ out of date. Additionally, during the first hour of the billing cycle, the application experiences a massive, instantaneous surge in traffic that results in HTTP 503 Service Unavailable errors for initial users. Which combination of actions should a Solutions Architect recommend to optimize performance and resolve these issues?

A retail company hosts a customer loyalty application that stores transaction records in an Amazon S3 bucket. To comply with new data protection regulations, the company must encrypt all objects in the bucket using a key that supports automatic annual rotation. Additionally, the company must securely share these encrypted transaction records with a third-party auditing firm's external AWS account. Which two configuration steps should a solutions architect perform to meet these requirements? (Select TWO.)

A company runs production workloads across two AWS accounts that belong to an organization in AWS Organizations. Account A runs microservices hosted on AWS Fargate. Account B runs legacy processing applications on Amazon EC2 instances. The company wants to reduce compute costs by committing to a 1-year Savings Plan. The solution must provide maximum savings coverage across both workloads, maintain high availability, and require minimal administrative effort. Which of the following actions should a Solutions Architect recommend to meet these requirements? (Select TWO.)