SAP-C01 (Page 39)

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.✑ The company has the following DNS resolution requirements:✑ On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company has an Amazon S3 bucket that contains millions of unencrypted objects.To comply with a recent security audit, a solutions architect needs to ensure that all objects are encrypted and needs to compile a list of objects that contain sensitive data.Many applications access objects in the S3 bucket, and the development team has limited resources.Which solution will meet these requirements with the LEAST development effort?Read More →

A company needs to move its write-intensive Amazon RDS for PostgreSQL database from the eu-west-1 Region to the eu-north-1 Region.As part of the migration, the company needs to change from Amazon RDS for PostgreSQL to Amazon Aurora PostgreSQL.The company is using a new AWS account to host a new Aurora PostgreSQL DB cluster.The RDS database is encrypted with an AWS managed AWS Key Management Service (AWS KMS) key.There must be no interruption to applications that use the RDS for PostgreSQL DB instance.Which solution will meet these requirements?Read More →

A solutions architect needs to improve an application that is hosted in the AWS Cloud.The application uses an Amazon Aurora MySQL DB instance that is experiencing overloaded connections.Most of the application’s operations insert records into the database.The application currently stores credentials in a text-based configuration file.The solutions architect needs to implement a solution so that the application can handle the current connection load.The solution must keep the credentials secure and must provide the ability to rotate the credentials automatically on a regular basis.Which solution will meet these requirements?Read More →

A company is running an application in the AWS Cloud.The company has several third-party services that integrate with the application through a RESTful API.The API is a serverless implementation with an Amazon API Gateway regional API endpoint that integrates with several different AWS Lambda functions.The application’s data is nonrelational and is stored in an Amazon DynamoDB table.The application and the API are running in the eu-west-1 Region.The company needs the API to also be available in the us-east-1 Region.All data must be available in both Regions.A solutions architect already has deployed all the Lambda functions in us-east-1.Which additional steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company uses AWS Organizations.The company creates a central VPC in an AWS account that is designated for networking in a single AWS Region.The central VPC has an AWS Site-to-Site VPN connection to the company’s on-premises network.A solutions architect must create another AWS account that uses the same networking resources that the central VPC uses.Which solution meets these requirements MOST cost-effectively?Read More →

A company has millions of objects in an Amazon S3 bucket.The objects are in the S3 Standard storage class.All the S3 objects are accessed frequently.The number of users and applications that access the objects is increasing rapidly.The objects are encrypted with server-side encryption with AWS KMS keys (SSE-KMS).A solutions architect reviews the company’s monthly AWS invoice and notices that AWS KMS costs are increasing because of the high number of requests from Amazon S3.The solutions architect needs to optimize costs with minimal changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.Which solution will meet these requirements?Read More →

A software development company has multiple engineers who are working remotely.The company is running Active Directory Domain Services (AD DS) on an Amazon EC2 instance.The company’s security policy states that all internal, nonpublic services that are deployed in a VPC must be accessible through a VPN.Multi-factor authentication (MFA) must be used for access to a VPN.What should a solutions architect do to meet these requirements?Read More →

A company has developed an application that is running Windows Server on VMware vSphere VMs that the company hosts on premises.The application data is stored in a proprietary format that must be read through the application.The company manually provisioned the servers and the application.As part of its disaster recovery plan, the company wants the ability to host its application on AWS temporarily if the company’s on-premises environment becomes unavailable.The company wants the application to return to on-premises hosting after a disaster recovery event is complete.The RPO is 5 minutes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →