SAP-C01 (Page 23)

A bank is designing an online customer service portal where customers can chat with customer service agents.The portal is required to maintain a 15-minuteRPO or RTO in case of a regional disaster.Banking regulations require that all customer service chat transcripts must be preserved on durable storage for at least7 years, chat conversations must be encrypted in-flight, and transcripts must be encrypted at rest.The Data Loss Prevention team requires that data at rest must be encrypted using a key that the team controls, rotates, and revokes.Which design meets these requirements?Read More →

A company owns a chain of travel agencies and is running an application in the AWS Cloud.Company employees use the application to search for information about travel destinations.Destination content is updated four times each year.Two fixed Amazon EC2 instances serve the application.The company uses an Amazon Route 53 public hosted zone with a multivalue record of travel.example.com that returns the Elastic IP addresses for the EC2 instances.The application uses Amazon DynamoDB as its primary data store.The company uses a self-hosted Redis instance as a caching solution.During content updates, the load on the EC2 instances and the caching solution increases drastically.This increased load has led to downtime on several occasions.A solutions architect must update the application so that the application is highly available and can handle the load that is generated by the content updates.Which solution will meet these requirements?Read More →

A large multinational company runs a timesheet application on AWS that is used by staff across the world.The application runs on Amazon EC2 instances in anAuto Scaling group behind an Elastic Load Balancing (ELB) load balancer, and stores data in an Amazon RDS MySQL Multi-AZ database instance.The CFO is concerned about the impact on the business if the application is not available.The application must not be down for more than two hours, but he solution must be as cost-effective as possible.How should the Solutions Architect meet the CFO’s requirements while minimizing data loss?Read More →

A company has a web service deployed in the following two AWS Regions: us-west-2 and us-est-1.Each AWS region runs an identical version of the web service.Amazon Route 53 is used to route customers to the AWS Region that has the lowest latency.The company wants to improve the availability of the web service in case an outage occurs in one of the two AWS Regions.A Solutions Architect has recommended that a Route 53 health check be performed.The health check must detect a specific text on an endpoint.What combination of conditions should the endpoint meet to pass the Route 53 health check? (Choose two.)Read More →

A company must deploy multiple independent instances of an application.The front-end application is internet accessible.However, corporate policy stipulates that the backends are to be isolated from each other and the internet, yet accessible from a centralized administration server.The application setup should be automated to minimize the opportunity for mistakes as new instances are deployed.Which option meets the requirements and MINIMIZES costs?Read More →

A company has decided to move some workloads onto AWS to create a grid environment to run market analytics.The grid will consist of many similar instances, spun-up by a job-scheduling function.Each time a large analytics workload is completed, a new VPC is deployed along with job scheduler and grid nodes.Multiple grids could be running in parallel.Key requirements are:✑ Grid instances must communicate with Amazon S3 to retrieve data to be processed.✑ Grid instances must communicate with Amazon DynamoDB to track intermediate data.✑ The job scheduler needs only to communicate with the Amazon EC2 API to start new grid nodes.A key requirement is that the environment has no access to the internet, either directly or via the on-premises proxy.However, the application needs to be able to seamlessly communicate to Amazon S3, Amazon DynamoDB, and Amazon EC2 API, without the need for reconfiguration for each new deployment.Which of the following should the Solutions Architect do to achieve this target architecture? (Choose three.)Read More →

A company is running an image-processing service in the AWS Cloud.Users upload images to an Amazon S3 bucket for processing.When an image is uploaded to the S3 bucket, several microservices that are based on AWS Lambda functions need to perform different processing tasks on the image.Each task’s processing must start immediately after an image is uploaded.Which solution will meet these requirements?Read More →

A company had a tight deadline to migrate its on-premises environment to AWS.It moved over Microsoft SQL Servers and Microsoft Windows Servers using the virtual machine import/export service and rebuild other applications native to the cloud.The team created both Amazon EC2 databases and used Amazon RDS.Each team in the company was responsible for migrating their applications, and they have created individual accounts for isolation of resources.The company did not have much time to consider costs, but now it would like suggestions on reducing its AWS spend.Which steps should a Solutions Architect take to reduce costs?Read More →

A company wants to host its website on AWS using serverless architecture design patterns for global customers.The company has outlined its requirements as follow:✑ The website should be responsive.✑ The website should offer minimal latency.✑ The website should be highly available.✑ Users should be able to authenticate through social identity providers such as Google, Facebook, and Amazon.✑ There should be baseline DDoS protections for spikes in traffic.How can the design requirements be met?Read More →

The CISO of a large enterprise with multiple IT departments, each with its own AWS account, wants one central place where AWS permissions for users can be managed and users authentication credentials can be synchronized with the company’s existing on-premises solution.Which solution will meet the CISO’s requirements?Read More →