SAP-C01 (Page 20)

A solutions architect needs to review the design of an Amazon EMR cluster that is using the EMR File System (EMRFS).The cluster performs tasks that are critical to business needs.The cluster is running Amazon EC2 On-Demand Instances at all times for all task, master, and core nodes.The EMR tasks run each morning, starting at 1:00 AM.and take 6 hours to finish running.The amount of time to complete the processing is not a priority because the data is not referenced until late in the day.The solutions architect must review the architecture and suggest a solution to minimize the compute costs.Which solution should the solutions architect recommend to meet these requirements?Read More →

A developer reports receiving an Error 403: Access Denied message when they try to download an object from an Amazon S3 bucket.The S3 bucket is accessed using an S3 endpoint inside a VPC, and is encrypted with an AWS KMS key.A solutions architect has verified that the developer is assuming the correct IAM role in the account that allows the object to be downloaded.The S3 bucket policy and the NACL are also valid.Which additional step should the solutions architect take to troubleshoot this issue?Read More →

A solutions architect has launched multiple Amazon EC2 instances in a placement group within a single Availability Zone.Because of additional load on the system, the solutions architect attempts to add new instances to the placement group.However, the solutions architect receives an insufficient capacity error.What should the solutions architect do to troubleshoot this issue?Read More →

A medical company is running a REST API on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group behind an Application LoadBalancer (ALB).The ALB runs in three public subnets, and the EC2 instances run in three private subnets.The company has deployed an Amazon CloudFront distribution that has the ALB as the only origin.Which solution should a solutions architect recommend to enhance the origin security?Read More →

A company is running an application in the AWS Cloud.The application uses AWS Lambda functions and Amazon Elastic Container Service (Amazon ECS) containers that run with AWS Fargate technology as its primary compute.The load on the application is irregular.The application experiences long periods of no usage, followed by sudden and significant increases and decreases in traffic.The application is write-heavy and stores data in an Amazon Aurora MySQL database.The database runs on an Amazon RDS memory optimized DB instance that is not able to handle the load.What is the MOST cost-effective way for the company to handle the sudden and significant changes in traffic?Read More →

An online magazine will launch its latest edition this month.This edition will be the first to be distributed globally.The magazine’s dynamic website currently uses an Application Load Balancer in front of the web tier, a fleet of Amazon EC2 instances for web and application servers, and Amazon Aurora MySQL.Portions of the website include static content and almost all traffic is read-only.The magazine is expecting a significant spike in internet traffic when the new edition is launched.Optimal performance is a top priority for the week following the launch.Which combination of steps should a solutions architect take to reduce system response times for a global audience? (Choose two.)Read More →

A company is refactoring its on-premises order-processing platform in the AWS Cloud.The platform includes a web front end that is hosted on a fleet of VMs.RabbitMQ to connect the front end to the backend, and a Kubernetes cluster to run a containerized backend system to process the orders.The company does not want to make any major changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company has introduced a new policy that allows employees to work remotely from their homes if they connect by using a VPN.The company is hosting internal applications with VPCs in multiple AWS accounts.Currently, the applications are accessible from the company’s on-premises office network through an AWS Site- to-Site VPN connection.The VPC in the company’s main AWS account has peering connections established with VPCs in other AWS accounts.A solutions architect must design a scalable AWS Client VPN solution for employees to use while they work from home.What is the MOST cost-effective solution that meets these requirements?Read More →

A finance company is running its business-critical application on current-generation Linux EC2 instances.The application includes a self-managed MySQL database performing heavy I/O operations.The application is working fine to handle a moderate amount of traffic during the month.However, it slows down during the final three days of each month due to month-end reporting, even though the company is using Elastic Load Balancers and Auto Scaling within its infrastructure to meet the increased demand.Which of the following actions would allow the database to handle the month-end load with the LEAST impact on performance?Read More →