SAP-C01 (Page 10)

A group of research institutions and hospitals are in a partnership to study 2 PBs of genomic data.The institute that owns the data stores it in an Amazon S3 bucket and updates it regularly.The institute would like to give all of the organizations in the partnership read access to the data.All members of the partnership are extremely cost-conscious, and the institute that owns the account with the S3 bucket is concerned about covering the costs for requests and data transfers from Amazon S3.Which solution allows for secure datasharing without causing the institute that owns the bucket to assume all the costs for S3 requests and data transfers?Read More →

An on-premises application will be migrated to the cloud.The application consists of a single Elasticsearch virtual machine with data source feeds from local systems that will not be migrated, and a Java web application on Apache Tomcat running on three virtual machines.The Elasticsearch server currently uses 1 TB of storage out of 16 TB available storage, and the web application is updated every 4 months.Multiple users access the web application from the Internet.There is a 10Gbit AWS Direct Connect connection established, and the application can be migrated over a scheduled 48-hour change window.Which strategy will have the LEAST impact on the Operations staff after the migration?Read More →

A company has a serverless application comprised of Amazon CloudFront, Amazon API Gateway, and AWS Lambda functions.The current deployment process of the application code is to create a new version number of the Lambda function and run an AWS CLI script to update.If the new function version has errors, another CLI script reverts by deploying the previous working version of the function.The company would like to decrease the time to deploy new versions of the application logic provided by the Lambda functions, and also reduce the time to detect and revert when errors are identified.How can this be accomplished?Read More →

A large company experienced a drastic increase in its monthly AWS spend.This is after Developers accidentally launched Amazon EC2 instances in unexpected regions.The company has established practices around least privileges for Developers and controls access to on-premises resources using Active Directory groups.The company now want to control costs by restricting the level of access that Developers have to the AWS Management Console without impacting their productivity.The company would also like to allow Developers to launch Amazon EC2 in only one region, without limiting access to other services in any region.How can this company achieve these new security requirements while minimizing the administrative burden on the Operations team?Read More →

A company is using an Amazon CloudFront distribution to distribute both static and dynamic content from a web application running behind an Application LoadBalancer.The web application requires user authorization and session tracking for dynamic content.The CloudFront distribution has a single cache behavior configured to forward the Authorization, Host, and User-Agent HTTP whitelist headers and a session cookie to the origin.All other cache behavior settings are set to their default value.A valid ACM certificate is applied to the CloudFront distribution with a matching CNAME in the distribution settings.The ACM certificate is also applied to theHTTPS listener for the Application Load Balancer.The CloudFront origin protocol policy is set to HTTPS only.Analysis of the cache statistics report shows that the miss rate for this distribution is very high.What can the Solutions Architect do to improve the cache hit rate for this distribution without causing the SSL/TLS handshake between CloudFront and theApplication Load Balancer to fail?Read More →

A company is running its solution on AWS in a manually created VPC.The company is using AWS CloudFormation to provision other parts of the infrastructure.According to a new requirement, the company must manage all infrastructure in an automatic way.What should the company do to meet this new requirement with the LEAST effort?Read More →

A three-tier web application runs on Amazon EC2 instances.Cron daemons are used to trigger scripts that collect the web server, application, and database logs and send them to a centralized location every hour.Occasionally, scaling events or unplanned outages have caused the instances to stop before the latest logs were collected, and the log files were lost.Which of the following options is the MOST reliable way of collecting and preserving the log files?Read More →

A company wants to ensure that the workloads for each of its business units have complete autonomy and a minimal blast radius in AWS.The Security team must be able to control access to the resources and services in the account to ensure that particular services are not used by the business units.How can a Solutions Architect achieve the isolation requirements?Read More →

To ensure failover capabilities on an elastic network interface (ENI), what should you use for incoming traffic?Read More →

A scientific company needs to process text and image data from an Amazon S3 bucket.The data is collected from several radar stations during a live, time-critical phase of a deep space mission.The radar stations upload the data to the source S3 bucket.The data is prefixed by radar station identification number.The company created a destination S3 bucket in a second account.Data must be copied from the source S3 bucket to the destination S3 bucket to meet a compliance objective.The replication occurs through the use of an S3 replication rule to cover all objects in the source S3 bucket.One specific radar station is identified as having the most accurate data.Data replication at this radar station must be monitored for completion within 30 minutes after the radar station uploads the objects to the source S3 bucket.What should a solutions architect do to meet these requirements?Read More →