SAP-C01 (Page 19)

A Solutions Architect is designing the storage layer for a recently purchased application.The application will be running on Amazon EC2 instances and has the following layers and requirements:✑ Data layer: A POSIX file system shared across many systems.✑ Service layer: Static file content that requires block storage with more than 100k IOPS.Which combination of AWS services will meet these needs? (Choose two.)Read More →

A financial services company is moving to AWS and wants to enable developers to experiment and innovate while preventing access to production applications.The company has the following requirements:✑ Production workloads cannot be directly connected to the internet.✑ All workloads must be restricted to the us-west-2 and eu-central-1 Regions.✑ Notification should be sent when developer sandboxes exceed $500 in AWS spending monthly.Which combination of actions needs to be taken to create a multi-account structure that meets the company’s requirements? (Choose three.)Read More →

A company runs an application in the cloud that consists of a database and a website.Users can post data to the website, have the data processed, and have the data sent back to them in an email.Data is stored in a MySQL database running on an Amazon EC2 instance.The database is running in a VPC with two private subnets.The website is running on Apache Tomcat in a single EC2 instance in a different VPC with one public subnet.There is a single VPC peering connection between the database and website VPC.The website has suffered several outages during the last month due to high traffic.Which actions should a solutions architect take to increase the reliability of the application? (Choose three.)Read More →

A company has many services running in its on-premises data center.The data center is connected to AWS using AWS Direct Connect (DX) and an IPSec VPN.The service data is sensitive and connectivity cannot traverse the internet.The company wants to expand into a new market segment and begin offering its services to other companies that are using AWS.Which solution will meet these requirements?Read More →

A company recently started hosting new application workloads in the AWS Cloud.The company is using Amazon EC2 instances, Amazon Elastic File System(Amazon EFS) file systems, and Amazon RDS DB instances.To meet regulatory and business requirements, the company must make the following changes for data backups:* Backups must be retained based on custom daily, weekly, and monthly requirements.* Backups must be replicated to at least one other AWS Region immediately after capture.* The backup solution must provide a single source of backup status across the AWS environment.* The backup solution must send immediate notifications upon failure of any resource backup.Which combination of steps will meet these requirements with the LEAST amount of operational overhead? (Choose three.)Read More →

A company is running several large workloads on Amazon EC2 instances.Each EC2 instance has multiple Amazon Elastic Block Store (Amazon EBS) volumes attached to it.Once each day, an AWS Lambda function invokes the creation of EBS volume snapshots.These snapshots accumulate until an administrator manually purges them.The company must maintain backups for a minimum of 30 days.A solutions architect needs to reduce the costs of this process.Which solution meets these requirements MOST cost-effectively?Read More →

A company is creating a REST API to share information with six of its partners based in the United States.The company has created an Amazon API GatewayRegional endpoint.Each of the six partners will access the API once per day to post daily sales figures.After initial deployment, the company observes 1,000 requests per second originating from 500 different IP addresses around the world.The company believes this traffic is originating from a botnet and wants to secure its API while minimizing cost.Which approach should the company take to secure its API?Read More →

A company uses AWS Organizations.The company has an organization that has a central management account.The company plans to provision multiple AWS accounts for different departments.All department accounts must be a member of the company’s organization.Compliance requirements state that each account must have only one VPC.Additionally, each VPC must have an identical network security configuration that includes fully configured subnets, gateways, network ACLs, and security groups.The company wants this security setup to be automatically applied when a new department account is created.The company wants to use the central management account for all security operations, but the central management account should not have the security setup.Which approach meets these requirements with the LEAST amount of setup?Read More →

A large company has increased its utilization of AWS over time in an unmanaged way.As such, they have a large number of independent AWS accounts across different business units, projects, and environments.The company has created a Cloud Center of Excellence team, which is responsible for managing all aspects of the AWS Cloud, including their AWS accounts.Which of the following should the Cloud Center of Excellence team do to BEST address their requirements in a centralized way? (Choose two.)Read More →

A retail company is running an application that stores invoice files in an Amazon S3 bucket and metadata about the files in an Amazon DynamoDB table.The application software runs in both us-east-1 and eu-west-1.The S3 bucket and DynamoDB table are in us-east-1.The company wants to protect itself from data corruption and loss of connectivity to either Region.Which option meets these requirements?Read More →