Tüm alıştırma soruları

A financial technology company is modernizing its legacy ledger auditing API by migrating it to a serverless architecture on AWS. The new API must be hosted privately and accessed securely by internal microservices running in different VPCs across multiple AWS accounts within the same AWS Organization. The architecture must ensure that API traffic does not traverse the public internet and must minimize both network latency and administrative overhead by avoiding the management of inter-VPC transit routing or peering connections. The company also requires identity-based access control at the API Gateway layer. Which architecture meets these requirements with the least administrative complexity?

A financial services company is launching a personalized dashboard that provides real-time portfolio performance metrics to $2,000,000$ active customers. During the stock market opening at 9:30 AM, query traffic is projected to surge instantly from $2,000$ requests per second to $300,000$ requests per second. The application is hosted on Amazon EC2 instances within an Auto Scaling group behind an Application Load Balancer (ALB), and the portfolio data resides in an Amazon RDS for PostgreSQL database. To handle this daily flash traffic spike without dropping connections or incurring high latency, which strategy should a solutions architect implement?

A digital advertising company is designing a real-time bidding (RTB) platform that processes ad auction requests from global ad exchanges. The system must handle a baseline of $100,000$ requests per second (RPS) and scale to support sudden spikes of up to $800,000$ RPS with sub-$15$ millisecond response times. The current design proposes using an Application Load Balancer (ALB) routing traffic to Amazon ECS tasks running on AWS Fargate, with Amazon Aurora PostgreSQL as the persistent database.

Which two actions should the solutions architect take to meet the performance and latency requirements under peak traffic loads? (Select two.)

An enterprise is building a new content delivery portal. The architecture requires two storage tiers:

1. A persistent store for user session data (NoSQL workload) requiring sub-millisecond latencies for active sessions and active-active replication between two AWS regions.
2. A shared file system (File storage) to host legacy application files that must be concurrently mounted by multiple Linux-based Amazon EC2 instances across three Availability Zones. The file system must be encrypted at rest using a key that allows the enterprise to delegate access to a central security auditing account.

Which two storage and database configurations should the solutions architect select to meet these requirements? (Select TWO.)

A solutions architect is designing a database strategy for a new high-performance retail application (OLTP workload) that requires a MySQL-compatible database. The application expects massive spikes in read traffic that must be handled with minimal latency. The business requires a disaster recovery (DR) strategy in a secondary AWS Region with a recovery time objective (RTO) of less than $10\text{ minutes}$ and a recovery point objective (RPO) of less than $1\text{ minute}$. Furthermore, all database snapshots and transaction logs must be exported to an Amazon S3 bucket in a separate central security account, and the security auditing team must be able to decrypt the database exports using a cross-account IAM role. Which database and storage strategy should the solutions architect choose to meet these requirements?

An online tax-filing platform is preparing for the final filing day of the tax year. The platform currently handles a baseline load of $2,000$ requests per second (RPS) using Amazon ECS tasks on AWS Fargate behind an Application Load Balancer (ALB). The backend database is an Amazon Aurora PostgreSQL DB cluster. Based on historical data, traffic is expected to spike instantaneously to $120,000$ RPS within a $2$-minute window. During this peak period, users will also run resource-intensive financial reporting dashboards that execute complex analytical queries. Which two actions should the Solutions Architect take to optimize the performance and scalability of this solution? (Select TWO.)

An enterprise is designing a new document archiving system. The application tier runs on Amazon EC2 instances in an Application account. The system must store documents in an Amazon S3 bucket located in a central Archive account within the same AWS Organization. The documents must be encrypted at rest using a KMS key. The security team requires that the KMS key be managed in the Archive account. Furthermore, an organization-wide guardrail must prevent any user or role in the Application account from deleting the S3 bucket or scheduling the deletion of the KMS key. Which two actions should the solutions architect recommend to satisfy these requirements? (Select TWO.)

A media broadcasting company is modernizing its user subscription metadata API by refactoring a legacy application into a serverless architecture on AWS. The new system will use Amazon API Gateway and AWS Lambda to query an Amazon RDS PostgreSQL database. The database resides in private VPC subnets. The Lambda function must also make outbound HTTPS calls to an external partner's payment gateway. The migration has the following requirements:

* The database must be protected against connection exhaustion during high-traffic broadcast events.
* High availability must be maintained for all outbound external payments API calls.
* The subscription API function must not impact other critical serverless workloads in the same AWS account by exhausting the regional concurrency limit during peak events.
* All environment variables containing sensitive database credentials must be encrypted using an AWS KMS key that supports custom key policies for auditing by an external security team's AWS account.

Which configuration should a Solutions Architect recommend?

A smart utility provider is designing a new serverless telemetry platform to ingest power consumption data from $5,000,000$ smart meters. Each meter transmits a $2\text{ KB}$ JSON payload every $15$ seconds. During grid emergency events, the system must support flash traffic where meters transmit data every second. The application must process the incoming telemetry in near-real-time to detect anomalies, store the data for long-term historical analytics, and support a high-volume dashboard that queries the latest meter status with sub-second latency. Which combination of architectural decisions should a Solutions Architect recommend to achieve optimal performance and scalability? (Select TWO.)

An enterprise is designing a containerized web application on AWS that will be deployed using Amazon ECS across multiple Availability Zones. The application needs to dynamically process files and requires a shared, POSIX-compliant file system with sub-millisecond latencies for random read/write operations. Additionally, the application metadata must be stored in a relational database that handles high-volume OLTP workloads and supports automatic horizontal read scaling to accommodate traffic bursts. The architecture must achieve a Recovery Time Objective (RTO) of less than 30 minutes and a Recovery Point Objective (RPO) of less than 5 minutes.

Which two storage and database configurations should the solutions architect select to meet these requirements? (Select TWO.)

A Solutions Architect is designing a centralized compliance auditing solution for a large enterprise. The enterprise has an AWS Organization containing multiple member accounts. The requirement is to enable AWS CloudTrail in all member accounts and have them deliver their log files to a single Amazon S3 bucket located in a dedicated Security account. All logs must be encrypted at rest. The solution must follow the principle of least privilege and prevent unauthorized accounts from writing to the S3 bucket or using the encryption key. Which of the following represents the most secure and compliant architecture design to meet these requirements?

A financial services company is designing a cross-account backup recovery strategy under AWS Organizations. The production workload database runs in a production account (Account ID: $111122223333$) and stores backups in a primary backup vault. The compliance policy requires that database backups must be copied daily to a secure disaster recovery (DR) account (Account ID: $444455556666$) and stored in a destination backup vault. Both backup vaults must encrypt backups at rest using Customer Managed Keys (CMKs) to satisfy auditing requirements. The copy operation must be initiated from the production account and run automatically using AWS Backup. Which combination of actions should the Solutions Architect perform to configure the required security and compliance controls for this cross-account backup copy operation? (Select TWO.)

A global food delivery application is launching a real-time order tracking feature. During daily lunch and dinner peak hours, order tracking activity increases significantly. The system must support a peak of $50,000$ database writes per second for order status updates, and a peak of $250,000$ database reads per second for customers checking their order status. The backend architecture consists of an Application Load Balancer (ALB), an Auto Scaling group of Amazon EC2 instances, and an Amazon Aurora MySQL database cluster with one writer and one reader instance. During peak hours, database CPU utilization on the writer node spikes to $95\%$, causing order status update delays and connection timeouts. The application requires sub-second latency for all operations. Which of the following database tier optimization strategies will meet these requirements while maintaining operational efficiency and high availability?

A digital healthcare provider is modernizing its medical document processing application by refactoring a legacy webhook receiver into a serverless architecture on AWS. The webhook receiver accepts completed document upload notifications from external partner AWS accounts, decrypts the payloads using an AWS KMS key shared with the partners, and processes the payload metadata before writing it to an Amazon Aurora PostgreSQL database.

The solution must meet the following architectural requirements:
- Provide a highly available, public HTTPS endpoint to receive webhook notifications.
- Prevent large spikes in partner webhook volume from consuming all execution concurrency in the AWS account, which would throttle other critical synchronous API functions.
- Support key sharing and decryption of the payloads sent by external partner AWS accounts.
- Prevent connection exhaustion on the Aurora database during traffic bursts.
- Maintain high availability across multiple Availability Zones for all compute and network egress components.

Which of the following architectures meets these requirements with the least operational risk?

A media company is launching a live interactive voting feature during a weekly television broadcast. The platform expects an immediate traffic spike of $300,000$ concurrent requests within the first $30$ seconds of the voting window opening. The application retrieves user profiles and records votes. The current architecture consists of an Application Load Balancer (ALB) routing traffic to an Amazon ECS service running on AWS Fargate, backed by an Amazon Aurora PostgreSQL DB cluster. During load testing, the ALB drops requests with $503$ Service Unavailable errors during the first minute of the spike, and the database becomes unresponsive due to read contention on the user profiles table. Which combination of actions will resolve these performance and scalability issues?

A healthcare provider is modernizing its patient portal backend by refactoring a legacy monolithic API into a serverless architecture. The new design uses Amazon API Gateway and AWS Lambda functions that query a PostgreSQL database in a private subnet. The architecture must satisfy the following requirements:

1. The API must be accessible only from the on-premises network via an existing AWS Direct Connect connection.
2. The database must be protected from connection exhaustion during sudden morning login spikes, while ensuring Lambda functions remain highly available.
3. A single high-volume notification function must not exhaust the regional concurrency limit and disrupt other critical portal operations.
4. All application logs must be encrypted using a KMS Customer Managed Key (CMK) that is shared with a centralized security account.

Which TWO configurations should the Solutions Architect implement to meet these requirements?

A healthcare provider is designing a new medical imaging analysis solution. The ingestion tier runs on Amazon ECS tasks in an Ingestion account (Account A). The processed high-resolution images must be securely stored in an Amazon S3 bucket within a centralized Archiving account (Account B) under HIPAA compliance. The images must be encrypted at rest using a customer managed key (CMK) in AWS Key Management Service (AWS KMS). The solution must ensure that only ECS tasks in Account A can upload files and perform cryptographic operations using the CMK. Which two actions should the Solutions Architect perform to implement this secure cross-account storage and encryption architecture? (Select TWO.)

A solutions architect is designing the database strategy for a new online ticketing application (OLTP workload). The application requires a relational database backend that can handle a high rate of transactions. The architecture must achieve a Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of less than 5 seconds in the event of an Availability Zone outage. Additionally, the system must scale its read capacity dynamically to handle sudden spikes in query volume. The security policy mandates that database encryption keys must be managed in a centralized security AWS account. Which design strategy meets these requirements?

A financial trading platform is launching a new real-time market simulation application. During the opening bell at $9:30$ AM EST daily, traffic instantly surges from a baseline of near zero to over $200,000$ concurrent connections within a two-minute window. The application requires sub-millisecond read access to the current price tickers and must handle the write traffic of order placements. The architecture consists of an Application Load Balancer (ALB), an Auto Scaling group of Amazon EC2 instances, and an Amazon Aurora PostgreSQL database. Which architecture design should a solutions architect recommend to optimize performance and scalability during the daily peak?

A gaming company is modernizing its multiplayer matchmaking lobby backend by migrating to a serverless architecture on AWS. The design features a public Amazon API Gateway HTTP API that routes incoming requests to an AWS Lambda function. The Lambda function must perform low-latency read and write operations against an Amazon ElastiCache for Redis cluster deployed in private subnets across $3$ Availability Zones ($AZs$). The Lambda function also requires outbound internet connectivity to communicate with external gaming partner APIs. Additionally, the Lambda function must retrieve and decrypt game configuration settings stored in a centralized security account, which are encrypted using an AWS KMS key. The architecture must protect other administrative Lambda functions in the same account from concurrency exhaustion during high-traffic peaks, avoid single points of network failure, and ensure that updates to the Lambda function can be rolled back automatically if error rates increase.

Which of the following configurations meets these requirements?