SAP-C01 (Page 28)

A North American company with headquarters on the East Coast is deploying a new web application running on Amazon EC2 in the us-east-1 Region.The application should dynamically scale to meet user demand and maintain resiliency.Additionally, the application must have disaster recover capabilities in an active-passive configuration with the us-west-1 Region.Which steps should a solutions architect take after creating a VPC in the us-east-1 Region?Read More →

A solutions architect needs to migrate 50 TB of NFS data to Amazon S3.The files are on several NFS file servers on corporate network.These are dense file systems containing tens of millions of small files.The system operators have configured the file interface on an AWS Snowball Edge device and are using a shell script to copy data.Developers report that copying the data to the Snowball Edge device is very slow.The solutions architect suspects this may be related to the overhead of encrypting all the small files and transporting them over the network.Which changes can be made to speed up the data transfer?Read More →

A company has an application behind a load balancer with enough Amazon EC2 instances to satisfy peak demand.Scripts and third-party deployment solutions are used to configure EC2 instances when demand increases or an instance fails.The team must periodically evaluate the utilization of the instance types to ensure that the correct sizes are deployed.How can this workload be optimized to meet these requirements?Read More →

A Development team has created a series of AWS CloudFormation templates to help deploy services.They created a template for a network/virtual private cloud(VPC) stack, a database stack, a bastion host stack, and a web application-specific stack.Each service requires the deployment of at least:✑ A network/VPC stack✑ A bastion host stack✑ A web application stackEach template has multiple input parameters that make it difficult to deploy the services individually from the AWS CloudFormation console.The input parameters from one stack are typically outputs from other stacks.For example, the VPC ID, subnet IDs, and security groups from the network stack may need to be used in the application stack or database stack.Which actions will help reduce both the operational burden and the number of parameters passed into a service deployment? (Choose two.)Read More →

A company operating a website on AWS requires high levels of scalability, availability, and performance. The company is running a Ruby on Rails application onAmazon EC2. It has a data tier on MySQL 5.6 on Amazon EC2 using 16 TB of Amazon EBS storage Amazon CloudFront is used to cache application content.The Operations team is reporting continuous and unexpected growth of EBS volumes assigned to the MySQL database. The Solutions Architect has been asked to design a highly scalable, highly available, and high-performing solution.Which solution is the MOST cost-effective at scale?Read More →

A Solutions Architect is designing a network solution for a company that has applications running in a data center in Northern Virginia.The applications in the company’s data center require predictable performance to applications running in a virtual private cloud (VPC) located in us-east-1, and a secondary VPC in us- west-2 within the same account.The company data center is collocated in an AWS Direct Connect facility that serves the us-east-1 region.The company has already ordered an AWS Direct Connect connection and a cross-connect has been established.Which solution will meet the requirements at the LOWEST cost?Read More →

A Solutions Architect is designing the storage layer for a data warehousing application.The data files are large, but they have statically placed metadata at the beginning of each file that describes the size and placement of the file’s index.The data files are read in by a fleet of Amazon EC2 instances that store the index size, index location, and other category information about the data file in a database.That database is used by Amazon EMR to group files together for deeper analysis.What would be the MOST cost-effective, high availability storage solution for this workflow?Read More →

A company has a new security policy.The policy requires the company to log any event that retrieves data from Amazon S3 buckets.The company must save these audit logs in a dedicated S3 bucket.The company created the audit logs S3 bucket in an AWS account that is designated for centralized logging.The S3 bucket has a bucket policy that allows write- only cross-account access.A solutions architect must ensure that all S3 object-level access is being logged for current S3 buckets and future S3 buckets.Which solution will meet these requirements?Read More →

A company is adding a new approved external vendor that only supports IPv6 connectivity.The company’s backend systems sit in the private subnet of anAmazon VPC.The company uses a NAT gateway to allow these systems to communicate with external vendors over IPv4.Company policy requires systems that communicate with external vendors to use a security group that limits access to only approved external vendors.The virtual private cloud (VPC) uses the default network ACL.The Systems Operator successfully assigns IPv6 addresses to each of the backend systems.The Systems Operator also updates the outbound security group to include the IPv6 CIDR of the external vendor (destination).The systems within the VPC are able to ping one another successfully over IPv6.However, these systems are unable to communicate with the external vendor.What changes are required to enable communication with the external vendor?Read More →

A company is migrating its marketing website and content management system from an on-premises data center to AWS.The company wants the AWS application to be deployed in a VPC with Amazon EC2 instances used for the web servers and an Amazon RDS instance for the database.The company has a runbook document that describes the installation process of the on-premises system.The company would like to base the AWS system on the processes referenced in the runbook document.The runbook document describes the installation and configuration of the operating systems, network settings, the website, and content management system software on the servers.After the migration is complete, the company wants to be able to make changes quickly to take advantage of other AWS features.How can the application and environment be deployed and automated in AWS, while allowing for future changes?Read More →