SAP-C01 (Page 22)

A company is running an application in the AWS Cloud.The application consists of microservices that run on a fleet of Amazon EC2 instances in multipleAvailability Zones behind an Application Load Balancer.The company recently added a new REST API that was implemented in Amazon API Gateway.Some of the older microservices that run on EC2 instances need to call this new API.The company does not want the API to be accessible from the public internet and does not want proprietary data to traverse the public internet.What should a solutions architect do to meet these requirements?Read More →

A company wants to allow its Marketing team to perform SQL queries on customer records to identify market segments.The data is spread across hundreds of files.The records must be encrypted in transit and at rest.The Team Manager must have the ability to manage users and groups, but no team members should have access to services or resources not required for the SQL queries.Additionally, Administrators need to audit the queries made and receive notifications when a query violates rules defined by the Security team.AWS Organizations has been used to create a new account and an AWS IAM user with administrator permissions for the Team Manager.Which design meets these requirements?Read More →

The Security team needs to provide a team of interns with an AWS environment so they can build a serverless video transcoding application.The project will useAmazon S3, AWS Lambda, Amazon API Gateway, Amazon Cognito, Amazon DynamoDB, and Amazon Elastic Transcoder.The interns should be able to create and configure the necessary resources, but they may not have access to create or modify AWS IAM roles.The SolutionsArchitect creates a policy and attaches it to the interns’ group.How should the Security team configure the environment to ensure that the interns are self-sufficient?Read More →

A user is planning to host a Highly Available system on the AWS VPC.Which of the below mentioned statements is helpful in this scenario?Read More →

A company is deploying a new API to AWS.The API uses Amazon API Gateway with a Regional API endpoint and an AWS Lambda function for hosting.The API retrieves data from an external vendor API, stores data in an Amazon DynamoDB global table, and retrieves data from the DynamoDB global table.The API key for the vendor’s API is stored in AWS Secrets Manager and is encrypted with a customer managed key in AWS Key Management Service (AWS KMS).The company has deployed its own API into a single AWS Region.A solutions architect needs to change the API components of the company’s API to ensure that the components can run across multiple Regions in an active-active configuration.Which combination of changes will meet this requirement with the LEAST operational overhead? (Choose three.)Read More →

A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway.Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC.Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway.The transit gateway uses its default route table for any VPC attachment.A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company’s other VPCs.A solutions architect needs to limit the traffic between the VPCs.Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs.What should the solutions architect do to meet these requirements?Read More →

A company is finalizing the architecture for its backup solution for applications running on AWS.All of the applications run on AWS and use at least two AvailabilityZones in each tier.Company policy requires IT to durably store nightly backups for all its data in at least two locations: production and disaster recovery.The locations must be in different geographic regions.The company also needs the backup to be available to restore immediately at the production data center, and within 24 hours at the disaster recovery location.All backup processes must be fully automated.What is the MOST cost-effective backup solution that will meet all requirements?Read More →

A company is running a web application in the AWS Cloud.The application consists of dynamic content that is created on a set of Amazon EC2 instances.TheEC2 instances run in an Auto Scaling group that is configured as a target group for an Application Load Balancer (ALB).The company is using an Amazon CloudFront distribution to distribute the application globally.The CloudFront distribution uses the ALB as an origin.The company uses Amazon Route 53 for DNS and has created an A record of www.example.com for the CloudFront distribution.A solutions architect must configure the application so that itis highly available and fault tolerant.Which solution meets these requirements?Read More →

A company has a standard three-tier architecture using two Availability Zones.During the company’s off season, users report that the website is not working.TheSolutions Architect finds that no changes have been made to the environment recently, the website is reachable, and it is possible to log in.However, when theSolutions Architect selects the `find a store near you` function, the maps provided on the site by a third-party RESTful API call do not work about 50% of the time after refreshing the page.The outbound API calls are made through Amazon EC2 NAT instances.What is the MOST likely reason for this failure and how can it be mitigated in the future?Read More →

A retail company has a custom .NET web application running on AWS that uses Microsoft SQL Server for the database.The application servers maintain a user’s session locally.Which combination of architecture changes are needed to ensure all tiers of the solution are highly available? (Choose three.)Read More →