SAP-C01

A company manages multiple AWS accounts by using AWS Organizations.Under the root OU, the company has two OUs: Research and DataOps.Because of regulatory requirements, all resources that the company deploys in the organization must reside in the ap-northeast-1 Region.Additionally, EC2 instances that the company deploys in the DataOps OU must use a predefined list of instance types.A solutions architect must implement a solution that applies these restrictions.The solution must maximize operational efficiency and must minimize ongoing maintenance.Which combination of steps will meet these requirements? (Choose two.)Read More →

An enterprise runs 103 line-of-business applications on virtual machines in an on-premises data center.Many of the applications are simple PHP, Java, or Ruby web applications, are no longer actively developed, and serve little traffic.Which approach should be used to migrate these applications to AWS with the LOWEST infrastructure costs?Read More →

A company had a third-party audit of its AWS environment.The auditor identified secrets in developer documentation and found secrets that were hardcoded into AWS CloudFormation templates throughout the environment.The auditor also identified security groups that allowed inbound traffic from the internet and outbound traffic to all destinations on the internet.A solutions architect must design a solution that will encrypt all secrets and rotate the secrets every 90 days.Additionally, the solutions architect must configure the security groups to prevent resources from being accessible from the internet.Which solution will meet these requirements?Read More →

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are part of an Auto Scaling group.The application has unpredictable workloads and frequently scales out and in.The company’s development team wants to analyze application logs to find ways to improve the application’s performance.However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?Read More →

A company is using IoT devices on its manufacturing equipment.Data from the devices travels to the AWS Cloud through a connection to AWS IoT Core.An Amazon Kinesis data stream sends the data from AWS IoT Core to the company’s processing application.The processing application stores data in Amazon S3.A new requirement states that the company also must send the raw data to a third-party system by using an HTTP API.Which solution will meet these requirements with the LEAST amount of development work?Read More →

A large company has many business units.Each business unit has multiple AWS accounts for different purposes.The CIO of the company sees that each business unit has data that would be useful to share with other parts of the company.In total, there are about 10 PB of data that needs to be shared with users in1,000 AWS accounts.The data is proprietary, so some of it should only be available to users with specific job types.Some of the data is used for throughput of intensive workloads, such as simulations.The number of accounts changes frequently because of new initiatives, acquisitions, and divestitures.A Solutions Architect has been asked to design a system that will allow for sharing data for use in AWS with all of the employees in the company.Which approach will allow for secure data sharing in scalable way?Read More →

An online retail company hosts its stateful web-based application and MySQL database in an on-premises data center on a single server.The company wants to increase its customer base by conducting more marketing campaigns and promotions.In preparation, the company wants to migrate its application and database to AWS to increase the reliability of its architecture.Which solution should provide the HIGHEST level of reliability?Read More →

A Solutions Architect is responsible for redesigning a legacy Java application to improve its availability, data durability, and scalability. Currently, the application runs on a single high-memory Amazon EC2 instance. It accepts HTTP requests from upstream clients, adds them to an in-memory queue, and responds with a200 status. A separate application thread reads items from the queue, processes them, and persists the results to an Amazon RDS MySQL instance. The processing time for each item takes 90 seconds on average, most of which is spent waiting on external service calls, but the application is written to process multiple items in parallel.Traffic to this service is unpredictable. During periods of high load, items may sit in the internal queue for over an hour while the application processes the backlog.In addition, the current system has issues with availability and data loss if the single application node fails.Clients that access this service cannot be modified. They expect to receive a response to each HTTP request they send within 10 seconds before they will time out and retry the request.Which approach would improve the availability and durability of the system while decreasing the processing latency and minimizing costs?Read More →

A company has a three-tier application running on AWS with a web server, an application server, and an Amazon RDS MySQL DB instance.A solutions architect is designing a disaster recovery (DR) solution with an RPO of 5 minutes.Which solution will meet the company’s requirements?Read More →

A company is using Amazon Aurora MySQL for a customer relationship management (CRM) application.The application requires frequent maintenance on the database and the Amazon EC2 instances on which the application runs.For AWS Management Console access, the system administrators authenticate againstAWS Identity and Access Management (IAM) using an internal identity provider.For database access, each system administrator has a user name and password that have previously been configured within the database.A recent security audit revealed that the database passwords are not frequently rotated.The company wants to replace the passwords with temporary credentials using the company’s existing AWS access controls.Which set of options will meet the company’s requirements?Read More →