SAP-C01 (Page 37)

A company uses AWS Organizations to manage its AWS accounts.The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage.The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?Read More →

A company that uses AWS Organizations is creating several new AWS accounts.The company is setting up controls to properly allocate AWS costs to business units.The company must implement a solution to ensure that all resources include a tag that has a key of costcenter and a value from a predefined list of business units.The solution must send a notification each time a resource tag does not meet these criteria.The solution must not prevent the creation of resources.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS.The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC.The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company wants to retire its Oracle Solaris NFS storage arrays.The company requires rapid data migration over its internet network connection to a combination of destinations for Amazon S3, Amazon Elastic File System (Amazon EFS), and Amazon FSx for Windows File Server.The company also requires a full initial copy, as well as incremental transfers of changes until the retirement of the storage arrays.All data must be encrypted and checked for integrity.What should a solutions architect recommend to meet these requirements?Read More →

A company has developed an application that is running Windows Server on VMware vSphere VMs that the company hosts on premises.The application data is stored in a proprietary format that must be read through the application.The company manually provisioned the servers and the application.As part of its disaster recovery plan, the company wants the ability to host its application on AWS temporarily if the company’s on-premises environment becomes unavailable.The company wants the application to return to on-premises hosting after a disaster recovery event is complete.The RPO is 5 minutes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A software development company has multiple engineers who are working remotely.The company is running Active Directory Domain Services (AD DS) on an Amazon EC2 instance.The company’s security policy states that all internal, nonpublic services that are deployed in a VPC must be accessible through a VPN.Multi-factor authentication (MFA) must be used for access to a VPN.What should a solutions architect do to meet these requirements?Read More →

A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.Which solution will meet these requirements?Read More →

A company has millions of objects in an Amazon S3 bucket.The objects are in the S3 Standard storage class.All the S3 objects are accessed frequently.The number of users and applications that access the objects is increasing rapidly.The objects are encrypted with server-side encryption with AWS KMS keys (SSE-KMS).A solutions architect reviews the company’s monthly AWS invoice and notices that AWS KMS costs are increasing because of the high number of requests from Amazon S3.The solutions architect needs to optimize costs with minimal changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS Organizations.The company creates a central VPC in an AWS account that is designated for networking in a single AWS Region.The central VPC has an AWS Site-to-Site VPN connection to the company’s on-premises network.A solutions architect must create another AWS account that uses the same networking resources that the central VPC uses.Which solution meets these requirements MOST cost-effectively?Read More →

A company is running an application in the AWS Cloud.The company has several third-party services that integrate with the application through a RESTful API.The API is a serverless implementation with an Amazon API Gateway regional API endpoint that integrates with several different AWS Lambda functions.The application’s data is nonrelational and is stored in an Amazon DynamoDB table.The application and the API are running in the eu-west-1 Region.The company needs the API to also be available in the us-east-1 Region.All data must be available in both Regions.A solutions architect already has deployed all the Lambda functions in us-east-1.Which additional steps should the solutions architect take to meet these requirements? (Choose two.)Read More →