Free Amazon AWS-Solutions-Associate Exam Dumps Questions & Answers

A developer creates a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The developer reviews the deployment and notices some suspicious traffic to the application. The traffic is malicious and is coming from a single public IP address. A solutions architect must block the public IP address.
Which solution will meet this requirement?

• A.  Add the malicious IP address to an IP set in AWS WAF. Create a web ACL. Include an IP set rule with the action set to BLOCK. Associate the web ACL with the ALB.
• B.  Implement Amazon Detective to monitor traffic and to block malicious activity from the internet.
  Configure Detective to integrate with the ALB.
• C.  Implement AWS Resource Access Manager (AWS RAM) to manage traffic rules and to block malicious activity from the internet. Associate AWS RAM with the ALB.
• D.  Create a security group rule to deny all inbound traffic from the suspicious IP address. Associate the security group with the ALB.

A company is developing a social media application. The company anticipates rapid and unpredictable growth in users and data volume. The application needs to handle a continuous high volume of user requests. User requests include long-running processes that store large amounts of user-generated content and user profiles in a relational format. The processes must run in a specific order. The company requires an architecture that can scale resources to meet demand spikes without downtime or performance degradation. The company must ensure that the components of the application can evolve independently without affecting other parts of the system. Which combination of AWS services will meet these requirements?

• A.  Use Amazon DynamoDB as the database. Use AWS Lambda functions to implement the application.
  Configure Amazon DynamoDB Streams to invoke the Lambda functions. Use AWS Step Functions to manage workflows between services.
• B.  Deploy the application on Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type. Use Amazon RDS as the database. Use Amazon Simple Queue Service (Amazon SQS) to decouple message processing between components.
• C.  Use an AWS Elastic Beanstalk environment with auto scaling to deploy the application. Use Amazon RDS as the database. Use Amazon Simple Notification Service (Amazon SNS) to decouple message processing between components.
• D.  Deploy the application on Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type. Use Amazon RDS as the database. Use Amazon Simple Notification Service (Amazon SNS) to decouple message processing between components.

A media company is using video conversion tools that run on Amazon EC2 instances. The video conversion tools run on a combination of Windows EC2 instances and Linux EC2 instances. Each video file is tens of gigabytes in size. The video conversion tools must process the video files in the shortest possible amount of time. The company needs a single, centralized file storage solution that can be mounted on all the EC2 instances that host the video conversion tools.
Which solution will meet these requirements?

• A.  Deploy Amazon FSx for Windows File Server with solid state drive (SSD) storage.
• B.  Deploy Amazon FSx for Windows File Server with hard disk drive (HDD) storage.
• C.  Deploy Amazon Elastic File System (Amazon EFS) with General Purpose performance mode.
• D.  Deploy Amazon Elastic File System (Amazon EFS) with Max I/O performance mode.

A healthcare company stores personally identifiable information (PII) data in an Amazon RDS for Oracle database. The company must encrypt the PII data at rest. The company must use dedicated hardware modules to store and manage the encryption keys.

• A.  Use AWS CloudHSM backed AWS KMS keys to configure transparent encryption for the RDS database.
• B.  Configure RDS snapshots and use server-side encryption with Amazon S3 managed keys (SSE-S3).Store the keys in AWS CloudHSM.
• C.  Use AWS Key Management Service (AWS KMS) to configure encryption for the RDS database. Store and manage keys in AWS CloudHSM.
• D.  Use Amazon EC2 instance store encryption to encrypt database volumes by using AWS CloudHSM backed keys.

A solutions architect has an application container, an AWS Lambda function, and an Amazon Simple Queue Service (Amazon SQS) queue. The Lambda function uses the SQS queue as an event source. The Lambda function makes a call to a third-party machine learning (ML) API when the function is invoked. The response from the third-party API can take up to 60 seconds to return.
The Lambda function's timeout value is currently 65 seconds. The solutions architect has noticed that the Lambda function sometimes processes duplicate messages from the SQS queue.
What should the solutions architect do to ensure that the Lambda function does not process duplicate messages?

• A.  Configure the Lambda function with a larger amount of memory.
• B.  Configure the SQS queue's delivery delay value to be greater than the maximum time it takes to call the third-party API.
• C.  Configure an increase in the Lambda function's timeout value.
• D.  Configure the SQS queue's visibility timeout value to be greater than the maximum time it takes to call the third-party API.