SAP-C01 (Page 34)

A company wants to migrate its on-premises data center to the AWS Cloud.This includes thousands of virtualized Linux and Microsoft Windows servers, SAN storage, Java and PHP applications with MYSQL, and Oracle databases.There are many dependent services hosted either in the same data center or externally.The technical documentation is incomplete and outdated.A solutions architect needs to understand the current environment and estimate the cloud resource costs after the migration.Which tools or services should solutions architect use to plan the cloud migration? (Choose three.)Read More →

A company runs an e-commerce platform with front-end and e-commerce tiers.Both tiers run on LAMP stacks with the front-end instances running behind a load balancing appliance that has a virtual offering on AWS.Currently, the Operations team uses SSH to log in to the instances to maintain patches and address other concerns.The platform has recently been the target of multiple attacks, including:✑ A DDoS attack.✑ An SQL injection attack.✑ Several successful dictionary attacks on SSH accounts on the web servers.The company wants to improve the security of the e-commerce platform by migrating to AWS.The company’s Solutions Architects have decided to use the following approach:✑ Code review the existing application and fix any SQL injection issues.✑ Migrate the web application to AWS and leverage the latest AWS Linux AMI to address initial security patching.✑ Install AWS Systems Manager to manage patching and allow the system administrators to run commands on all instances, as needed.allWhat additional steps will addressof the identified attack types while providing high availability and minimizing risk?Read More →

A company is running multiple workloads in the AWS Cloud.The company has separate units for software development.The company uses AWS Organizations and federation with SAML to give permissions to developers to manage resources in their AWS accounts.The development units each deploy their production workloads into a common production account.Recently, an incident occurred in the production account in which members of a development unit terminated an EC2 instance that belonged to a different development unit.A solutions architect must create a solution that prevents a similar incident from happening in the future.The solution also must allow developers the possibility to manage the instances used for their workloads.Which strategy will meet these requirements?Read More →

A company is running a serverless application that consists of several AWS Lambda functions and Amazon DynamoDB tables.The company has created new functionality that requires the Lambda functions to access an Amazon Neptune DB cluster.The Neptune DB cluster is located in three subnets in a VPC.Which of the possible solutions will allow the Lambda functions to access the Neptune DB cluster and DynamoDB tables? (Choose two.)Read More →

A large company is running a popular web application.The application runs on several Amazon EC2 Linux instances in an Auto Scaling group in a private subnet.An Application Load Balancer is targeting the instances in the Auto Scaling group in the private subnet.AWS Systems Manager Session Manager is configured, and AWS Systems Manager Agent is running on all the EC2 instances.The company recently released a new version of the application.Some EC2 instances are now being marked as unhealthy and are being terminated.As a result, the application is running at reduced capacity.A solutions architect tries to determine the root cause by analyzing Amazon CloudWatch logs that are collected from the application, but the logs are inconclusive.How should the solutions architect gain access to an EC2 instance to troubleshoot the issue?Read More →

A company is refactoring an existing web service that provides read and write access to structured data.The service must respond to short but significant spikes in the system load.The service must be fault tolerant across multiple AWS Regions.Which actions should be taken to meet these requirements?Read More →

AnyCompany has acquired numerous companies over the past few years.The CIO for AnyCompany would like to keep the resources for each acquired company separate.The CIO also would like to enforce a chargeback model where each company pays for the AWS services it uses.The Solutions Architect is tasked with designing an AWS architecture that allows AnyCompany to achieve the following:✑ Implementing a detailed chargeback mechanism to ensure that each company pays for the resources it uses.✑ AnyCompany can pay for AWS services for all its companies through a single invoice.✑ Developers in each acquired company have access to resources in their company only.✑ Developers in an acquired company should not be able to affect resources in their company only.✑ A single identity store is used to authenticate Developers across all companies.Which of the following approaches would meet these requirements? (Choose two.)Read More →

A company has an application written using an in-house software framework.The framework installation takes 30 minutes and is performed with a user data script.Company Developers deploy changes to the application frequently.The framework installation is becoming a bottleneck in this process.Which of the following would speed up this process?Read More →

A company wants to use Amazon S3 to back up its on-premises file storage solution.The company’s on-premises file storage solution supports NFS, and the company wants its new solution to support NFS.The company wants to archive the backup files after 5 days.If the company needs archived files for disaster recovery, the company is willing to wait a few days for the retrieval of those files.Which solution meets these requirements MOST cost-effectively?Read More →

A company uses an on-premises data analytics platform.The system is highly available in a fully redundant configuration across 12 servers in the company’s data center.The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users.Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs.The scheduled jobs account for 65% of the system usage.User jobs typically finish running in less than 5 minutes and have no SLA.The user jobs account for 35% of system usage.During system failures, scheduled jobs must continue to meet SLAs.However, user jobs can be delayed.A solutions architect needs to move the system to Amazon EC2 instances and adopt a consumption-based model to reduce costs with no long-term commitments.The solution must maintain high availability and must not affect the SLAs.Which solution will meet these requirements MOST cost-effectively?Read More →