SAP-C01 (Page 30)

Which of the following does Amazon DynamoDB perform?Read More →

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ׀¢׀’ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

A media company has a static web application that is generated programmatically.The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront.The build pipeline runs inside a Build Account.The S3 bucket and CloudFront distribution are in a Distribution Account.The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account.The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI).During testing all attempts to access the application using the CloudFront URL result in anHTTP 403 Access Denied response.What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?Read More →

A company hosts a blog post application on AWS using Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.The application currently does not useAPI keys to authorize requests.The API model is as follows:GET/posts/[postid] to get post detailsGET/users[userid] to get user detailsGET/comments/[commentid] to get comments detailsThe company has noticed users are actively discussing topics in the comments section, and the company wants to increase user engagement by marking the comments appears in real time.Which design should be used to reduce comment latency and improve user experience?Read More →

A financial company needs to create a separate AWS account for a new digital wallet application.The company uses AWS Organizations to manage its accounts.A solutions architect uses the IAM user Support1 from the master account to create a new member account with [email protected] as the email address.What should the solutions architect do to create IAM users in the new member account?Read More →

A company recently completed a large-scale migration to AWS.Development teams that support various business units have their own accounts in AWSOrganizations.A central cloud team is responsible for controlling which services and resources can be accessed, and for creating operational strategies for all teams within the company.Some teams are approaching their account service quotas.The cloud team needs to create an automated and operationally efficient solution to proactively monitor service quotas.Monitoring should occur every 15 minutes and send alerts when a team exceeds 80% utilization.Which solution will meet these requirements?Read More →

An AWS customer has a web application that runs on premises.The web application fetches data from a third-party API that is behind a firewall.The third party accepts only one public CIDR block in each client’s allow list.The customer wants to migrate their web application to the AWS Cloud.The application will be hosted on a set of Amazon EC2 instances behind an ApplicationLoad Balancer (ALB) in a VPC.The ALB is located in public subnets.The EC2 instances are located in private subnets.NAT gateways provide internet access to the private subnets.How should a solutions architect ensure that the web application can continue to call the third-party API after the migration?Read More →

A company manages hundreds of AWS accounts centrally in an organization in AWS Organizations.The company recently started to allow product teams to create and manage their own S3 access points in their accounts.The S3 access points can be accessed only within VPCs, not on the Internet.What is the MOST operationally efficient way to enforce this requirement?Read More →

A company is migrating its data center from on premises to the AWS Cloud.The migration will take several months to complete.The company will use AmazonRoute 53 for private DNS zones.During the migration, the company must keep its AWS services pointed at the VPC’s Route 53 Resolver for DNS.The company also must maintain the ability to resolve addresses from its on-premises DNS server.A solutions architect must set up DNS so that Amazon EC2 instances can use native Route 53 endpoints to resolve on-premises DNS queries.Which configuration will meet these requirements?Read More →

A company has a photo sharing social networking application.To provide a consistent experience for users, the company performs some image processing on the photos uploaded by users before publishing on the application.The image processing is implemented using a set of Python libraries.The current architecture is as follows:✑ The image processing Python code runs in a single Amazon EC2 instance and stores the processed images in an Amazon S3 bucket named ImageBucket.✑ The front-end application, hosted in another bucket, loads the images from ImageBucket to display to users.With plans for global expansion, the company wants to implement changes in its existing architecture to be able to scale for increased demand on the application and reduce management complexity as the application scales.Which combination of changes should a solutions architect make? (Choose two.)Read More →