SAP-C01 (Page 38)

A solutions architect needs to improve an application that is hosted in the AWS Cloud.The application uses an Amazon Aurora MySQL DB instance that is experiencing overloaded connections.Most of the application’s operations insert records into the database.The application currently stores credentials in a text-based configuration file.The solutions architect needs to implement a solution so that the application can handle the current connection load.The solution must keep the credentials secure and must provide the ability to rotate the credentials automatically on a regular basis.Which solution will meet these requirements?Read More →

A company needs to move its write-intensive Amazon RDS for PostgreSQL database from the eu-west-1 Region to the eu-north-1 Region.As part of the migration, the company needs to change from Amazon RDS for PostgreSQL to Amazon Aurora PostgreSQL.The company is using a new AWS account to host a new Aurora PostgreSQL DB cluster.The RDS database is encrypted with an AWS managed AWS Key Management Service (AWS KMS) key.There must be no interruption to applications that use the RDS for PostgreSQL DB instance.Which solution will meet these requirements?Read More →

A company has an Amazon S3 bucket that contains millions of unencrypted objects.To comply with a recent security audit, a solutions architect needs to ensure that all objects are encrypted and needs to compile a list of objects that contain sensitive data.Many applications access objects in the S3 bucket, and the development team has limited resources.Which solution will meet these requirements with the LEAST development effort?Read More →

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.✑ The company has the following DNS resolution requirements:✑ On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has a serverless multi-tenant content management system on AWS.The architecture contains a web-based front end that interacts with an AmazonAPI Gateway API that uses a custom AWS Lambda authorizer.The authorizer authenticates a user to its tenant ID and encodes the information in a JSON WebToken (JWT) token.After authentication, each API call through API Gateway targets a Lambda function that interacts with a single Amazon DynamoDB table to fulfill requests.To comply with security standards, the company needs a stronger isolation between tenants.The company will have hundreds of customers within the first year.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has a High Performance Computing (HPC) cluster in its on-premises data center, which runs thousands of jobs in parallel for one week every month, processing petabytes of images.The images are stored on a network file server, which is replicated to a disaster recovery site.The on-premises data center has reached capacity and has started to spread the jobs out over the course of the month in order to better utilize the cluster, causing a delay in the job completion.The company has asked its Solutions Architect to design a cost-effective solution on AWS to scale beyond the current capacity of 5,000 cores and 10 petabytes of data.The solution must require the least amount of management overhead and maintain the current level of durability.Which solution will meet the company’s requirements?Read More →

A company is running a commercial Apache Hadoop cluster on Amazon EC2.This cluster is being used daily to query large files on Amazon S3.The data onAmazon S3 has been curated and does not require any additional transformations steps.The company is using a commercial business intelligence (BI) tool onAmazon EC2 to run queries against the Hadoop cluster and visualize the data.The company wants to reduce or eliminate the overhead costs associated with managing the Hadoop cluster and the BI tool.The company would like to move to a more cost-effective solution with minimal effort.The visualization is simple and requires performing some basic aggregation steps only.Which option will meet the company’s requirements?Read More →

A company runs a Windows Server host in a public subnet that is configured to allow a team of administrators to connect over RDP to troubleshoot issues with hosts in a private subnet.The host must be available at all times outside of a scheduled maintenance window, and needs to receive the latest operating system updates within 3 days of release.What should be done to manage the host with the LEAST amount of administrative effort?Read More →

A company is running a large application on premises.Its technology stack consists of Microsoft .NET for the web server platform and Apache Cassandra for the database.The company wants to migrate this application to AWS to improve service reliability.The IT team also wants to reduce the time it spends on capacity management and maintenance of this infrastructure.The Development team is willing and available to make code changes to support the migration.Which design is the LEAST complex to manage after the migration?Read More →