SAP-C01 (Page 10)

A company deployed a three-tier web application in two regions: us-east-1 and eu-west-1.The application must be active in both regions at the same time.The database tier of the application uses a single Amazon RDS Aurora database globally, with a master in us-east-1 and a read replica in eu-west-1.Both regions are connected by a VPN.The company wants to ensure that the application remains available even in the event of a region-level failure of all of the application’s components.It is acceptable for the application to be in read-only mode for up to 1 hour.The company plans to configure two Amazon Route 53 record sets, one for each of the regions.How should the company complete the configuration to meet its requirements while providing the lowest latency for the application end-users? (Choose two.)Read More →

A company is using AWS Organizations to manage 15 AWS accounts.A solutions architect wants to run advanced analytics on the company’s cloud expenditures.The cost data must be gathered and made available from an analytics account.The analytics application runs in a VPC and must receive the raw cost data each night to run the analytics.The solutions architect has decided to use the Cost Explorer API to fetch the raw data and store the data in Amazon S3 in JSON format.Access to the raw cost data must be restricted to the analytics application.The solutions architect has already created an AWS Lambda function to collect data by using the Cost ExplorerAPI.Which additional actions should the solutions architect take to meet these requirements?Read More →

A company is using AWS Organizations to manage multiple AWS accounts.For security purposes, the company requires the creation of an Amazon SimpleNotification Service (Amazon SNS) topic that enables integration with a third-party alerting system in all the Organizations member accounts.A solutions architect used an AWS CloudFormation template to create the SNS topic and stack sets to automate the deployment of CloudFormation stacks.Trusted access has been enabled in Organizations.What should the solutions architect do to deploy the CloudFormation StackSets in all AWS accounts?Read More →

A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts.The company’s information security policy states that the S3 bucket must not be accessed over the public internet and that each application should have the minimum permissions necessary to function.To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application.Which combination of steps should the solutions architect take to implement this solution? (Choose two.)Read More →

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWSCodeCommit repository.The security team wants to automatically find and remediate instances of this security vulnerability.Which solution will ensure that the credentials are appropriately secured automatically?Read More →

A company is migrating an application to the AWS Cloud.The application runs in an on-premises data center and writes thousands of images into a mounted NFS file system each night.After the company migrates the application, the company will host the application on an Amazon EC2 instance with a mounted AmazonElastic File System (Amazon EFS) file system.The company has established an AWS Direct Connect connection to AWS.Before the migration cutover, a solutions architect must build a process that will replicate the newly created on-premises images to the EFS file system.What is the MOST operationally efficient way to replicate the images?Read More →

A new startup is running a serverless application using AWS Lambda as the primary source of compute.New versions of the application must be made available to a subset of users before deploying changes to all users.Developers should also have the ability to abort the deployment and have access to an easy rollbackmechanism.A solutions architect decides to use AWS CodeDeploy to deploy changes when a new version is available.Which CodeDeploy configuration should the solutions architect use?Read More →

A company is planning to migrate an existing high performance computing (HPC) solution to the AWS Cloud.The existing solution consists of a 12-node cluster running Linux with high speed interconnectivity developed on a single rack.A solutions architect needs to optimize the performance of the HPC cluster.Which combination of steps will meet these requirements? (Choose two.)Read More →

A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number(PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →