SAP-C01 (Page 27)

You have set up Auto Scaling to automatically scale in.Consequently, you must decide which instances Auto Scaling should end first.What should you use to configure this?Read More →

A user is hosting a public website on AWS.The user wants to have the database and the app server on the AWS VPC.The user wants to setup a database that can connect to the Internet for any patch upgrade but cannot receive any request from the internet.How can the user set this up?Read More →

A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region.The company’s on-premises network uses the connection to communicate with the company’s resources in the AWS Cloud.The connection has a single private virtual interface that connects to a single VPC.A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region.The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.Which solution meets these requirements?Read More →

A company has released a new version of a website to target an audience in Asia and South America.The website’s media assets are hosted on Amazon S3 and have an Amazon CloudFront distribution to improve end-user performance.However, users are having a poor login experience, the authentication service is only available in the us-east-1 AWS Region.How can the Solutions Architect improve the login experience and maintain high security and performance with minimal management overhead?Read More →

A company is running a .NET three-tier web application on AWS.The team currently uses XL storage optimized instances to store and serve the website’s image and video files on local instance storage.The company has encountered issues with data loss from replication and instance failures.The Solutions Architect has been asked to redesign this application to improve its reliability while keeping costs low.Which solution will meet these requirements?Read More →

A company with multiple accounts is currently using a configuration that does not meet the following security governance policies:✑ Prevent ingress from port 22 to any Amazon EC2 instance.✑ Require billing and application tags for resources.✑ Encrypt all Amazon EBS volumes.A solutions architect wants to provide preventive and detective controls, including notifications about a specific resource, if there are policy deviations.Which solution should the solutions architect implement?Read More →

A company is running a legacy application on Amazon EC2 instances in multiple Availability Zones behind a software load balancer that runs on an active/standby set of EC2 instances.For disaster recovery, the company has created a warm standby version of the application environment that is deployed in another AWSRegion.The domain for the application uses a hosted zone from Amazon Route 53.The company needs the application to use static IP addresses, even in the case of a failover event to the secondary Region.The company also requires the client’s source IP address to be available for auditing purposes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

An enterprise company’s data science team wants to provide a safe, cost-effective way to provide easy access to Amazon SageMaker.The data scientists have limited AWS knowledge and need to be able to launch a Jupyter notebook instance.The notebook instance needs to have a preconfigured AWS KMS key to encrypt data at rest on the machine learning storage volume without exposing the complex setup requirements.Which approach will allow the company to set up a self-service mechanism for the data scientists to launch Jupyter notebooks in its AWS accounts with theLEAST amount of operational overhead?Read More →

A company has multiple AWS accounts.The company recently had a security audit that revealed many unencrypted Amazon Elastic Block Store (Amazon EBS) volumes attached to Amazon EC2 instances.A solutions architect must encrypt the unencrypted volumes and ensure that unencrypted volumes will be detected automatically in the future.Additionally, the company wants a solution that can centrally manage multiple AWS accounts with a focus on compliance and security.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A weather forecasting company is migrating an application that stores data on premises in a PostgreSQL database.The Company wants to migrate the database to Amazon Aurora PostgreSQL.The database size grows at an average rate of 5 GB daily and is currently 50 TB.The data center has an internet connection with50 Mbps of available bandwidth.The migration to AWS must be completed as soon as possible within the next 21 days.Which data transfer strategy meets these requirements with the LEAST amount of application downtime?Read More →