SAP-C01 (Page 26)

A company is using multiple AWS accounts.The company has a shared service account and several other accounts for different projects.A team has a VPC in a project account.The team wants to connect this VPC to a corporate network through an AWS Direct Connect gateway that exists in the shared services account.The team wants to automatically perform a virtual private gateway association with the Direct Connect gateway by using an already- tested AWS Lambda function while deploying its VPC networking stack.The Lambda function code can assume a role by using AWS Security Token Service(AWS STS).The team is using AWS CloudFormation to deploy its infrastructure.Which combination of steps will meet these requirements? (Choose three.)Read More →

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has IoT sensors that monitor traffic patterns throughout a large city.The company wants to read and collect data from the sensors and perform aggregations on the data.A solutions architect designs a solution in which the IoT devices are streaming to Amazon Kinesis Data Streams.Several applications are reading from the stream.However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.Which actions should the solutions architect take to resolve this issue? (Choose three.)Read More →

A company is using a single AWS Region for its ecommerce website.The website includes a web application that runs on several Amazon EC2 instances behind an Application Load Balancer (ALB).The website also includes an Amazon DynamoDB table.A custom domain name in Amazon Route 53 is linked to the ALB.The company created an SSL/TLS certificate in AWS Certificate Manager (ACM) and attached the certificate to the ALB.The company is not using a content delivery network as part of its design.The company wants to replicate its entire application stack in a second Region to provide disaster recovery, plan for future growth, and provide improved access time to users.A solutions architect needs to implement a solution that achieves these goals and minimizes administrative overhead.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A Solutions Architect is building a solution for updating user metadata that is initiated by web servers.The solution needs to rapidly scale from hundreds to tens of thousands of jobs in less than 30 seconds.The solution must be asynchronous always avertable and minimize costs.Which strategies should the Solutions Architect use to meet these requirements?Read More →

MapMySite is setting up a web application in the AWS VPC.The organization has decided to use an AWS RDS instead of using its own DB instance for HA andDR requirements.The organization also wants to secure RDS access.How should the web application be setup with RDS?Read More →

In Amazon ElastiCache, the failure of a single cache node can have an impact on the availability of your application and the load on your back-end database whileElastiCache provisions a replacement for the failed cache node and it get repopulated.Which of the following is a solution to reduce this potential availability impact?Read More →

An organization is creating a VPC for their application hosting.The organization has created two private subnets in the same AZ and created one subnet in a separate zone.The organization wants to make a HA system with the internal ELB.Which of these statements is true with respect to an internal ELB in this scenario?Read More →

In Amazon IAM, what is the maximum length for a role name?Read More →

An organization is setting a website on the AWS VPC.The organization has blocked a few IPs to avoid a D-DOS attack.How can the organization configure that a request from the above mentioned IPs does not access the application instances?Read More →