AWS Certified Solutions Architect - Professional: 2019 SAP Exam Questions

5星 · 超过95%的资源需积分: 49 25 浏览量更新于2024-07-17 16 收藏 1.54MB PDF 举报

"这是一个关于AWS Certified Solutions Architect - Professional考试的题库，主要涉及AWS云服务中的SAP（Software as a Service）解决方案，以及如何在Amazon Virtual Private Cloud (VPC)中设计和实施安全的架构。" 在AWS环境中，构建一个安全且高效的e-commerce平台架构至关重要。题目的描述提供了一个已经部署的3-tier VPC结构，包括Web服务器子网、应用服务器子网和数据库服务器子网，以及相应的路由表和网络访问控制列表（NACL）。目标是确保Web服务器能够直接访问互联网，而应用和数据库服务器则不能直接访问，但需要能够远程管理和接收更新。问题的关键在于如何在不暴露内部服务器的情况下，实现远程管理和接收更新。选项A和B提出了两种可能的解决方案： A. 在Web服务器子网（subnet-258bc44d）中创建一个堡垒主机（bastion host）和一个NAT实例，并将rtb-238bc44b的路由指向NAT实例。这种方法可以确保Web服务器的外部访问，同时通过NAT实例，应用和数据库服务器可以匿名地访问互联网以获取更新，但不会直接暴露它们的IP地址。 B. 将rtb-238bc的路由添加到某个目的地，可能是指向一个互联网网关（IGW）或其他外部访问点。这个选项没有明确说明如何处理远程管理应用和数据库服务器，也没有提到NAT实例来隐藏内部服务器的直接访问。通常，最佳实践是采用选项A，因为它提供了一种安全的访问模式。堡垒主机用于远程管理内部系统，而NAT实例允许内部服务器通过互联网获取更新，同时保持对外部的不可见性。堡垒主机和NAT实例都是AWS架构中常见的安全设计元素，前者用于限制对内部网络的访问，后者用于匿名互联网连接。在AWS环境中，这样的架构设计可以帮助企业实现合规性和安全性，特别是在处理敏感数据或业务关键型应用程序时。此外，通过使用AWS的弹性IP地址，可以确保堡垒主机和NAT实例的稳定连接，即使实例本身需要重启或替换，IP地址也不会改变。这个考试题库强调了AWS云服务中的核心概念，如VPC、子网、路由表、NACL和安全的远程访问策略，这些都是作为AWS Certified Solutions Architect - Professional应掌握的关键知识点。了解和熟练运用这些工具和技术，是成功设计和实施高效、安全的云解决方案的基础。

A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a

web application hosted on Amazon Elastic Computer Cloud (EC2). The application has

dependencies on an on-premises mainframe database that uses a BASE (Baste Available, Soft

state, Eventual consistency) rather than an ACID (Atomicity, Consistency, Isolation, Durability)

consistency model. The application is exhibiting undesirable behavior because the database is

not able to handle the volume of writes. How can you reduce the load on your on-premises

database resources in the most cost-effective way?

Provision an RDS read-replica database on AWS to handle the writes and synchronize the two databases using Data

Pipeline.

Modify the application to use DynamoDB to feed an EMR cluster which uses a map function to write to the on-premises

database.

Modify the application to write to an Amazon SQS queue and develop a worker出现就选 process to flush the queue to the

on-premises database. 修改应用程序以写入Amazon SQS队列并开发工作进程以将队列刷新到本地数据库

Use an Amazon Elastic Map Reduce (EMR) S3DistCp as a synchronization mechanism between the on- premises

database and a Hadoop cluster on AWS.

Answer: C

QUESTION 19

Your company plans to host a large donation捐赠 website on Amazon Web Services (AWS).

You anticipate a large and undetermined amount of traffic that will create many database writes.

To be certain that you do not drop any writes to a database hosted on AWS, which service should

you use?

Amazon Simple Queue Service (SQS) for capturing the writes and draining the queue to write to

the database. 俩个标记结合出现就选

Amazon DynamoDB with provisioned write throughput up to the anticipated peak write

throughput.

Amazon ElastiCache to store the writes until the writes are committed to the database.

Amazon RDS with provisioned IOPS up to the anticipated peak write throughput.

Answer: A

QUESTION 20

You have been asked to design the storage layer for an application. The application requires disk

performance of at least 100,000 IOPS. In addition, the storage layer must be able to survive the

loss of an individual disk, EC2 instance, or Availability Zone without any data loss.

The volume you provide must have a capacity of at least 3 TB.

Which of the following designs will meet these objectives?

Instantiate a c3 8xlarge instance in us-east-1.

Provision 4x1TB EBS volumes, attach them to the instance, and configure them as a single RAID

5 volume.

Ensure that EBS snapshots are performed every 15 minutes.

Instantiate a c3 8xlarge instance in us-east-1.

Provision 3xlTB EBS volumes, attach them to the Instance, and configure them as a single RAID

0 volume.

Ensure that EBS snapshots are performed every 15 minutes.

Instantiate an 12 8xlarge instance in us-east-1a.

Create a RAID 0 volume using the four 800GB SSD ephemeral disks provided with the instance.

Provision 3x1TB EBS volumes, attach them to the instance, and configure them as a second

RAID 0 volume.

Configure synchronous, block-level replication from the ephemeral-backed volume to the EBS-

backed volume.

Instantiate a c3 8xlarge instance in us-east-1.

Provision an AWS Storage Gateway and configure it for 3 TB of storage and 100,000 IOPS.

Attach the volume to the instance.

Instantiate an 12 8xlarge instance in us-east-1a. 标记结合出现就选

Create a RAID 0 volume using the four 800GB SSD ephemeral disks provided with the instance.

Configure synchronous, block-level replication to an identically configured instance in us-east-1b.

Answer: E

QUESTION 21

Your company has HQ in Tokyo and branch offices all over the world and is using a logistics

software with a multi-regional deployment on AWS in Japan, Europe and US.

The logistic software has a 3-tier architecture and currently uses MySQL 5.6 for data persistence.

Each region has deployed its own database.

In the HQ region you run an hourly batch process reading data from every region to compute

cross-regional reports that are sent by email to all offices.

This batch process must be completed as fast as possible to quickly optimize logistics.

How do you build the database architecture in order to meet the requirements?

For each regional deployment, use MySQL on EC2 with a master in the region and use S3 to

copy data files hourly to the HQ region.

For each regional deployment, use RDS MySQL with a master in the region and send hourly RDS

snapshots to the HQ region.

Use Direct Connect to connect all regional MySQL deployments to the HQ region and reduce

network latency for the batch process.

For each regional deployment, use RDS MySQL with a master in the region and a read replica In

the HQ region.

For each regional deployment, use MySQL on EC2 with a master in the region and send hourly

EBS snapshots to the HQ region.

Answer: D

QUESTION 22

Company B is launching a new game app for mobile devices. Users will log into the game using

their existing social media account. To streamline data capture, Company B would like to directly

save player data and scoring information from the mobile app to a DynamoDB table named

ScoreData. When a user saves their game, the progress data will be stored to the GameState S3

bucket. What is the best approach for storing data to DynamoDB and S3?

Use Login with Amazon allowing users to sign in with an Amazon account providing the mobile app with access to the

ScoreData DynamoDB table and the GameState S3 bucket.

Use temporary security credentials出现就选 that assume a role providing access to the ScoreData DynamoDB table

and the GameState S3 bucket using web identity federation

Use an IAM user with access credentials assigned a role providing access to the ScoreData DynamoDB table and the

GameState S3 bucket for distribution with the mobile app

D. Use an EC2 instance that is launched with an EC2 role providing access to the ScoreData DynamoDB table and the

GameState S3 bucket that communicates with the mobile app via web services

Answer: B

QUESTION 23

You have recently joined a startup company building sensors to measure street noise and air quality

in urban areas.

The company has been running a pilot deployment of around 100 sensors for 3 months. Each sensor

uploads 1KB of sensor data every minute to a backend hosted on AWS. During the pilot, you

measured a peak of 10 IOPS on the database, and you stored an average of 3GB of sensor data per

month in the database.

The current deployment consists of a load-balanced, auto scaled Ingestion layer using EC2

instances, and a PostgreSQL RDS database with 500GB standard storage

The pilot is considered a success and your CEO has managed to get the attention of some potential

Investors. The business plan requires a deployment of at least 100k sensors which needs to be

supported by the backend.

You also need to store sensor data for at least two years to be able to compare year over year

improvements.

To secure funding, you have to make sure that the platform meets these requirements and leaves

room for further scaling.

Which setup will meet the requirements?

Replace the RDS instance with a 6 node Redshift cluster with 96TB of storage

Keep the current architecture, but upgrade RDS storage to 3TB and 10k provisioned IOPS

Ingest data into a DynamoDB table and move old出现就选 data to a Redshift cluster

Add an SQS queue to the ingestion layer to buffer writes to the RDS Instance

Answer: C

QUESTION 24

A web design company currently runs several FTP servers that their 250 customers use to upload

剩余38页未读，继续阅读

lolgigeo

粉丝: 22
资源: 5

AWS Certified Solutions Architect - Professional: 2019 SAP Exam ...

最新资源

AWS Certified Solutions Architect - Professional: 2019 SAP Exam ...

AWS-C01.AWS-SAP.529Q-566Q.zip

aws 助理架构师认证模拟试题

AWS SAP.pdf

aws sap c02 中文题库

aws saa-c03考试成绩

sap-c02 题库

aws 微服务 部署架构

aws saa-c02题库 2021

SAP PO AWS S3

SAP PO的AWS S3的适配器怎么配置

最新资源

aws 微服务部署架构