SAP-C01 (Page 19)

A company’s AWS architecture currently uses access keys and secret access keys stored on each instance to access AWS services.Database credentials are hard-coded on each instance.SSH keys for command-line remote access are stored in a secured Amazon S3 bucket.The company has asked its solutions architect to improve the security posture of the architecture without adding operational complexity.Which combination of steps should the solutions architect take to accomplish this? (Choose three.)Read More →

A company is collecting a large amount of data from a fleet of IoT devices.Data is stored as Optimized Row Columnar (ORC) files in the Hadoop Distributed FileSystem (HDFS) on a persistent Amazon EMR cluster.The company’s data analytics team queries the data by using SQL in Apache Presto deployed on the sameEMR cluster.Queries scan large amounts of data, always run for less than 15 minutes, and run only between 5 PM and 10 PM.The company is concerned about the high cost associated with the current solution.A solutions architect must propose the most cost-effective solution that will allow SQL data queries.Which solution will meet these requirements?Read More →

A company is building dozens of new workloads by using a variety of AWS services.Each workload will belong to a separate business unit.The company needs to minimize costs as each business unit experiments with ways to innovate.The company also needs to maximize scalability for its security team so that the security team can identify and respond to threats as quickly as possible for all the workloads.Which combination of actions should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company is migrating its development and production workloads to a new organization in AWS Organizations.The company has created a separate member account for development and a separate member account for production.Consolidated billing is inked to the management account.In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts.Which solution will meet this requirement?Read More →

A company in the United States (US) has acquired a company in Europe.Both companies use the AWS Cloud.The US company has built a new application with a microservices architecture.The US company is hosting the application across five VPCs in the us-east-2 Region.The application must be able to access resources in one VPC in the eu-west-1 Region.However, the application must not be able to access any other VPCs.The VPCs in both Regions have no overlapping CIDR ranges.All Accounts are already consolidated in one organization in AWS Organizations.Which solution will meet these requirements MOST cost-effectively?Read More →

A United Kingdom (UK) company recently completed a successful proof of concept in Amazon WorkSpaces.The company also has a large office in the UnitedStates (US).Staff members from each office regularly travel between the two locations and need access to a corporate WorkSpace without any reconfiguration of their WorkSpaces client.The company has purchased a domain by using Amazon Route 53 for the connection alias.The company will use a Windows profile and document management solution.A solutions architect needs to design the full solution.The solution must use a configuration of WorkSpaces in two AWS Regions and must provide Regional resiliency.Which solution will meet these requirements?Read More →

A company is planning to migrate an application from on premises to the AWS Cloud.The company will begin the migration by moving the application’s underlying data storage to AWS.The application data is stored on a shared file system on premises, and the application servers connect to the shared file system throughSMB.A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage.Until the application is fully migrated and code is rewritten to use native Amazon S3 APIs, the application must continue to have access to the data through SMB.The solutions architect must migrate the application data toAWS to its new location while still allowing the on-premises application to access the data.Which solution will meet these requirements?Read More →

A company has more than 10,000 sensors that send data to an on-premises Apache Kafka server by using the Message Queuing Telemetry Transport (MQTT) protocol.The on-premises Kafka server transforms the data and then stores the results as objects in an Amazon S3 bucket.Recently, the Kafka server crashed.The company lost sensor data while the server was being restored.A solutions architect must create a new design on AWS that is highly available and scalable to prevent a similar occurrence.Which solution will meet these requirements?Read More →

A company is running a custom database in the AWS Cloud.The database uses Amazon EC2 for compute and uses Amazon Elastic Block Store (Amazon EBS) for storage.The database runs on the latest generation of EC2 instances and uses a General Purpose SSD (gp2) EBS volume for data.The current data volume has the following characteristics:✑ The volume is 512 GB in size.✑ The volume never goes above 256 GB utilization.✑ The volume consistently uses around 1,500 IOPS.A solutions architect needs to conduct an analysis of the current database storage layer and make a recommendation about ways to reduce cost.Which solution will provide the MOST cost savings without impacting the performance of the database?Read More →

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →