SAP-C01 (Page 17)

A company has implemented a new security requirement.According to the new requirement, the company must scan all traffic from corporate AWS instances in the company’s VPC for violations of the company’s security policies.As a result of these scans, the company can block access to and from specific IP addresses.To meet the new requirement, the company deploys a set of Amazon EC2 instances in private subnets to serve as transparent proxies.The company installs approved proxy server software on these EC2 instances.The company modifies the route tables on all subnets to use the corresponding EC2 instances with proxy software as the default route.The company also creates security groups that are compliant with the security policies and assigns these security groups to the EC2 instances.Despite these configurations, the traffic of the EC2 instances in their private subnets is not being properly forwarded to the internet.What should a solutions architect do to resolve this issue?Read More →

A company manages an on-premises JavaScript front-end web application.The application is hosted on two servers secured with a corporate Active Directory.The application calls a set of Java-based microservices on an application server and stores data in a clustered MySQL database.The application is heavily used during the day on weekdays.It is lightly used during the evenings and weekends.Daytime traffic to the application has increased rapidly, and reliability has diminished as a result.The company wants to migrate the application to AWS with a solution that eliminates the need for server maintenance, with an API to securely connect to the microservices.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company is offering one of its applications as a multi-tenant software-as-a-service (SaaS) solution.The application has a RESTAPI that runs on a set of AmazonEC2 instances behind an Application Load Balancer (ALB).The instances run in an Auto Scaling group.Last week, one of the tenants ran a campaign that significantly increased traffic to the REST API.The resource constraints affected the performance of other tenants that were running on the same set of EC2 instances.The company wants the ability to throttle API calls for each tenant.Which combination of steps should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company deploys a new web application.As part of the setup, the company configures AWS WAF to log to Amazon S3 through Amazon Kinesis Data Firehose.The company develops an Amazon Athena query that runs once daily to return AWS WAF log data from the previous 24 hours.The volume of daily logs is constant.However, over time, the same query is taking more time to run.A solutions architect needs to design a solution to prevent the query time from continuing to increase.The solution must minimize operational overhead.Which solution will meet these requirements?Read More →

A company is building a hybrid solution between its existing on-premises systems and a new backend in AWS.The company has a management application to monitor the state of its current IT infrastructure and automate responses to issues.The company wants to incorporate the status of its consumed AWS services into the application.The application uses an HTTPS endpoint to receive updates.Which approach meets these requirements with the LEAST amount of operational overhead?Read More →

A company has automated the nightly retraining of its machine learning models by using AWS Step Functions.The workflow consists of multiple steps that useAWS Lambda.Each step can fail for various reasons, and any failure causes a failure of the overall workflow.A review reveals that the retraining has failed multiple nights in a row without the company noticing the failure.A solutions architect needs to improve the workflow so that notifications are sent for all types of failures in the retraining process.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company runs many workloads on AWS and uses AWS Organizations to manage its accounts.The workloads are hosted on Amazon EC2, AWS Fargate, andAWS Lambda.Some of the workloads have unpredictable demand.Accounts record high usage in some months and low usage in other months.The company wants to optimize its compute costs over the next 3 years.A solutions architect obtains a 6-month average for each of the accounts across the organization to calculate usage.Which solution will provide the MOST cost savings for all the organization’s compute usage?Read More →

A company’s service for video game recommendations has just gone viral.The company has new users from all over the world.The website for the service is hosted on a set of Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB).The website consists of static content with different resources being loaded depending on the device type.Users recently reported that the load time for the website has increased.Administrators are reporting high loads on the EC2 instances that host the service.Which set actions should a solutions architect take to improve response times?Read More →

A company has developed a mobile game.The backend for the game runs on several virtual machines located in an on-premises data center.The business logic is exposed using a REST API with multiple functions.Player session data is stored in central file storage.Backend services use different API keys for throttling and to distinguish between live and test traffic.The load on the game backend varies throughout the day.During peak hours, the server capacity is not sufficient.There are also latency issues when fetching player session data.Management has asked a solutions architect to present a cloud architecture that can handle the game’s varying load and provide low-latency data access.The API model should not be changed.Which solution meets these requirements?Read More →

A solutions architect is migrating an existing workload to AWS Fargate.The task can only run in a private subnet within the VPC where there is no direct connectivity from outside the system to the application.When the Fargate task is launched, the task fails with the following error:CannotPullContainerError: API error (500): Get https://111122223333.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request canceled while waiting for connectionHow should the solutions architect correct this error?Read More →