SAP-C01 (Page 11)

A company has its cloud infrastructure on AWS.A solutions architect needs to define the infrastructure as code.The infrastructure is currently deployed in oneAWS Region.The company’s business expansion plan includes deployments in multiple Regions across multiple AWS accounts.What should the solutions architect do to meet these requirements?Read More →

A research company is running daily simulations in the AWS Cloud to meet high demand.The simulations run on several hundred Amazon EC2 instances that are based on Amazon Linux 2.Occasionally, a simulation gets stuck and requires a cloud operations engineer to solve the problem by connecting to an EC2 instance through SSH.Company policy states that no EC2 instance can use the same SSH key and that all connections must be logged in AWS CloudTrail.How can a solutions architect meet these requirements?Read More →

An enterprise company wants to allow its developers to purchase third-party software through AWS Marketplace.The company uses an AWS Organizations account structure with full features enabled, and has a shared services account in each organizational unit (OU) that will be used by procurement managers.The procurement team’s policy indicates that developers should be able to obtain third-party software from an approved list only and use Private Marketplace in AWSMarketplace to achieve this requirement.The procurement team wants administration of Private Marketplace to be restricted to a role named procurement- manager-role, which could be assumed by procurement managers.Other IAM users, groups, roles, and account administrators in the company should be deniedPrivate Marketplace administrative access.What is the MOST efficient way to design an architecture to meet these requirements?Read More →

A company has several AWS accounts.A development team is building an automation framework for cloud governance and remediation processes.The automation framework uses AWS Lambda functions in a centralized account.A solutions architect must implement a least privilege permissions policy that allows the Lambda functions to run in each of the company’s AWS accounts.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company provides AWS solutions to its users with AWS CloudFormation templates.Users launch the templates in their accounts to have different solutions provisioned for them.The users want to improve the deployment strategy for solutions while retaining the ability to do the following:✑ Add their own features to a solution for their specific deployments.✑ Run unit tests on their changes.✑ Turn features on and off for their deployments.✑ Automatically update with code changes.✑ Run security scanning tools for their deployments.Which strategies should the Solutions Architect use to meet the requirements?Read More →

A Solutions Architect is working with a company that is extremely sensitive to its IT costs and wishes to implement controls that will result in a predictable AWS spend each month.Which combination of steps can help the company control and monitor its monthly AWS usage to achieve a cost that is as close as possible to the target amount?(Choose three.)Read More →

After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have theNAT device be the target of internet bound traffic of your private subnet.When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful.Which of the following steps could resolve the issue?Read More →

How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?Read More →

Select the correct set of options.These are the initial settings for the default security group:Read More →

You deployed your company website using Elastic Beanstalk and you enabled log file rotation to S3.An Elastic Map Reduce job is periodically analyzing the logs on S3 to build a usage dashboard that you share with your CIO.You recently improved overall performance of the website using Cloud Front for dynamic content delivery and your website as the origin.After this architectural change, the usage dashboard shows that the traffic on your website dropped by an order of magnitude.How do you fix your usage dashboard?Read More →