Tüm alıştırma soruları

AeroTelemetry Systems is modernizing its on-premises SCADA telemetry pipeline by migrating its ingestion microservices to an Amazon EKS cluster. Due to strict data residency regulations and sub-$10\text{ ms}$ latency requirements for local factory machinery, the EKS worker nodes are deployed on an AWS Outposts rack in the local facility, while the EKS control plane is hosted in the parent AWS Region. The ingestion pods running on the Outposts nodes must securely and privately connect to an Amazon Aurora PostgreSQL database located in a database VPC within the parent Region. An Amazon Route 53 Private Hosted Zone (PHZ) for 'telemetry-db.internal' is hosted in a central shared services AWS account. The EKS Outposts VPC and the database VPC are connected via an AWS Transit Gateway. The system must maintain an SLA of $99.99\%$ ingestion availability, survive WAN connectivity drops of up to $2\text{ hours}$ to the parent AWS Region without failing local DNS resolution, and comply with data residency standards that prohibit telemetry data transit over the public internet. Which architecture meets these requirements while ensuring local DNS resilience and private connectivity?

A real-time ride-sharing application tracks driver availability and active passenger sessions. The backend database is an Amazon RDS for PostgreSQL DB instance. During rush hours, the platform experiences a massive surge in read queries from passengers searching for nearby driver metadata and viewing their active trip statuses. This surge causes database CPU utilization to spike to $95\%$, resulting in dispatch delays. The passenger session data must be cached with sub-millisecond latency, must survive cache node failures, and must be replicated across multiple Availability Zones. Additionally, the database read load must be optimized.

Which two actions should a solutions architect take to resolve these bottlenecks and satisfy the high availability requirements? (Select TWO.)

A Solutions Architect is planning the heterogeneous database migration of an on-premises Oracle 19c database to an Amazon Aurora PostgreSQL-Compatible Edition DB cluster. The source database supports a critical OLTP application experiencing a high volume of transactions, exceeding $12,000$ write transactions per second. The schema contains complex PL/SQL objects, standard relational tables, and several tables containing Large Binary Objects (LOBs) up to $5\text{ MB}$ in size. The migration must minimize downtime for the cutover, maintain high replication performance without degrading the source database's CPU utilization, and guarantee that LOB data is not truncated.

Which two actions must the Solutions Architect take to configure the migration components successfully? (Select two.)

A solutions architect is designing the migration of an on-premises 12 TB Oracle database to an Amazon Aurora PostgreSQL-Compatible Edition DB cluster. The source database supports a critical transactional application and experiences high write activity. The database contains several tables with Large Object (LOB) columns that store binary data up to 50 MB, alongside standard transactional tables. The migration strategy requires schema conversion and continuous replication to minimize downtime during the cutover window.

During initial testing of the AWS Database Migration Service (DMS) Change Data Capture (CDC) replication task, the solutions architect observes significant replication lag and CPU spikes on both the source database server and the AWS DMS replication instance. Additionally, some updates are not being replicated to the target database.

Which combination of actions will resolve these performance and replication issues while maintaining the target replication SLA? (Select two.)

A media company hosts a live video commentating platform on Amazon EC2 instances inside an Auto Scaling Group (ASG) behind an Application Load Balancer (ALB). The instances require 7 minutes to download application dependencies and initialize the service before passing target group health checks. During sudden high-profile broadcasts, traffic surges instantly, causing the ALB to return multiple HTTP 503 Service Unavailable errors. In addition, the ASG launches far more instances than necessary during these spikes, resulting in high resource over-provisioning costs. All outbound traffic from the instances is routed via a single NAT Gateway located in a single public subnet. The architecture must be modified to prevent HTTP 503 errors, prevent instance over-provisioning, and remove any single points of failure for outbound traffic. Which combination of architectural modifications will resolve these issues?

A company is modernizing its application by migrating legacy APIs to Amazon API Gateway and AWS Lambda. The system consists of a high-volume telemetry ingestion endpoint and a critical payment processing endpoint, both running in the same AWS account and Region. During performance testing, a massive surge in telemetry traffic causes the payment processing Lambda function to be throttled with HTTP 429 errors. Which configuration change will guarantee that the payment processing function has dedicated execution capacity?

Vortex Logistics is modernizing its legacy fleet tracking and dispatch application by migrating it to AWS. The application consists of several microservices that will be deployed on Amazon ECS using the AWS Fargate launch type. The tasks must be distributed across three Availability Zones in private subnets. The microservices must download dynamic compliance lists from the public internet and resolve hostnames for an internal inventory service hosted in a shared-services AWS account via a Route 53 Private Hosted Zone (PHZ) named `inventory.internal`. All Fargate tasks must run in isolated network environments without public IP addresses to comply with strict security policies. Which combination of actions should the Solutions Architect take to meet these requirements? (Select TWO.)

A company is modernizing a legacy application by refactoring its API into a serverless architecture using Amazon API Gateway and AWS Lambda. The backend will be accessed by Amazon EC2 instances residing in a private VPC subnet. The solutions architect must ensure that traffic between the EC2 instances and the API Gateway does not traverse the public internet, and that a sudden burst of requests to this specific Lambda function does not exhaust the regional concurrency pool, which would impact other critical workloads in the same AWS account. Which TWO configurations should the solutions architect implement to meet these requirements? (Select TWO.)

A collaborative software-as-a-service (SaaS) platform hosts its workspace configuration data and active user session privileges on an Amazon RDS for MySQL DB instance. During core business hours, database CPU utilization reaches 92% due to a high volume of read-heavy queries that retrieve authorization metadata. To mitigate this bottleneck, a solutions architect must implement a caching layer. The cached session data must remain highly available, replicate across multiple Availability Zones, and survive cache node failures. Which solution meets these requirements?

A biotechnology enterprise is designing a genomics research pipeline (File storage and OLTP workloads) that runs on Amazon EC2 instances across multiple Availability Zones in a single AWS Region. The pipeline has the following requirements:

- A shared file system that is POSIX-compliant, supports concurrent access from hundreds of EC2 instances, and scales throughput dynamically up to $3\text{ GB/s}$ during peak sequencing phases.
- A metadata database that must handle high-volume write and read queries with low latency.
- High availability with a Recovery Time Objective (RTO) of under $5\text{ minutes}$ and a Recovery Point Objective (RPO) of under $1\text{ minute}$ in the event of an Availability Zone outage.
- Securely share final sequencing output files, stored in Amazon S3, with a separate audit AWS account.

Which of the following database and storage strategies meets these requirements?

An organization is launching a serverless backend using Amazon API Gateway and AWS Lambda. While the main API functions experience steady traffic, a specific administrative function executes bursty, resource-intensive import jobs. The team needs to prevent the bursty administrative function from degrading the performance of the main API functions, and they must implement a deployment strategy that allows safe, monitored rollbacks for new versions. Which TWO configurations should the solutions architect implement? (Select TWO.)

A medical device company is designing a new AWS environment in the `eu-central-1` region. The architecture consists of a Production VPC (`vpc-prod-clinical`) and a Development VPC (`vpc-dev-clinical`), each deployed across two Availability Zones (AZ-A and AZ-B). The application workloads in the private subnets of both VPCs require highly available outbound internet access to download software patches. Additionally, the company needs to resolve internal API endpoints hosted in a Route 53 Private Hosted Zone (PHZ) named `clinical.internal` across both VPCs. Which two network design actions should the Solutions Architect recommend to satisfy these requirements while preventing single points of failure?

A healthcare provider is migrating its core electronic health record (EHR) database and web application servers from a private virtualization host to AWS using AWS Application Migration Service (MGN). The migration must utilize a secure, private network path over a $10\text{ Gbps}$ AWS Direct Connect connection terminated at an AWS Transit Gateway. Outbound internet access from the source virtual machines is prohibited due to regulatory requirements, meaning both replication data and control plane API traffic must remain strictly inside the private network. The staging area subnets are located in a dedicated Staging VPC connected to the Transit Gateway. Which of the following configuration steps must the Solutions Architect perform to establish the replication and control paths? (Select TWO.)

FinTrace Analytics is modernizing its transaction-matching audit engine by migrating it from on-premises virtualized environments to AWS. The target architecture requires the ingestion and preprocessing service to be deployed on Amazon ECS using the AWS Fargate launch type across three Availability Zones in a private subnet in VPC-A. This service needs to communicate privately with a transaction-matching engine, also running on Amazon ECS with the AWS Fargate launch type across three Availability Zones in a private subnet in VPC-B.

Both VPCs are connected using an AWS Transit Gateway, with routing properly configured between the subnets. The matching engine must be resolvable via the private domain name engine.fintrace.local from the preprocessing tasks in VPC-A. The design must ensure high availability, zero exposure of the matching engine to the public internet, and minimal operational overhead.

Which of the following configurations should a Solutions Architect recommend?

A company is migrating an on-premises MySQL database to an Amazon Aurora PostgreSQL-Compatible Edition DB cluster using AWS Database Migration Service (AWS DMS) and the AWS Schema Conversion Tool (AWS SCT). The migration strategy requires a full load followed by continuous replication (Change Data Capture) to minimize application downtime. After the AWS DMS task completes the full load phase successfully, the replication task fails to capture any ongoing inserts or updates from the source MySQL database.

Which of the following database configurations must be modified on the source MySQL database to allow AWS DMS to successfully perform Change Data Capture?

An organization is setting up federated single sign-on (SSO) to allow on-premises directory users to access the AWS Management Console across multiple member accounts in an AWS Organization. The solution must use a third-party SAML 2.0 Identity Provider (IdP). Which two configuration steps must be performed in each target AWS member account to establish this federation? (Select TWO.)

A retail company is planning to migrate its supply chain platform to AWS. The on-premises infrastructure consists of 400 virtual machines running on VMware vCenter, and 30 physical bare-metal database servers. The company's security policy strictly prohibits the installation of any software agents on the production application servers running on the virtual machines. Additionally, the physical database servers run a mix of legacy Red Hat Enterprise Linux (RHEL) 5 (which is not supported by the AWS Application Discovery Agent) and Windows Server 2019 (which is supported). The database subnet has no direct outbound internet access, but traffic can be routed through an internal HTTPS proxy. The company wants to perform system discovery and track the migration progress in AWS Migration Hub. Which of the following actions should the Solutions Architect recommend? (Select TWO.)

A logistics company is migrating $8$ physical on-premises servers to AWS using AWS Application Migration Service (MGN). A $1\text{ Gbps}$ AWS Direct Connect connection is established and terminated at an AWS Transit Gateway, which connects to the AWS landing zone VPCs. The on-premises servers are isolated from the public internet. The company requires that all replication control plane traffic and data replication traffic traverse the Direct Connect connection privately. Which TWO configurations must the solutions architect implement to meet these requirements?

A company manages a multi-account AWS environment using AWS Organizations. The central platform team maintains shared resources in a shared services account. The team needs to automate the deployment and configuration of a proprietary security agent on Amazon EC2 instances located in multiple production accounts. The agent requires a license key that must be stored securely in the shared services account. The deployment must automatically detect and remediate configuration drift on the production instances. Which two actions must the solutions architect take to meet these requirements? (Select two.)

An organization is planning to migrate a critical, highly transactional Oracle database to an Amazon Aurora PostgreSQL-Compatible Edition DB cluster. The database contains several tables with large amounts of data, some of which contain Large Objects (LOBs) and do not have primary keys defined. The migration must have near-zero downtime, so the team is using the AWS Schema Conversion Tool (SCT) and AWS Database Migration Service (DMS) with Change Data Capture (CDC) enabled. Minimal supplemental logging is enabled at the database level on the source Oracle database. During testing, the DMS task completes the full load phase successfully. However, during the CDC phase, the task shows a status of 'Running with errors'. An analysis of the target database shows that while INSERT operations are being replicated, UPDATE and DELETE operations are missing for tables that do not have primary keys. Furthermore, tables containing LOB columns are experiencing severe performance degradation during replication. Which combination of actions will resolve these issues while maintaining replication performance?