SAP-C01 (Page 4)

A Solutions Architect must update an application environment within AWS Elastic Beanstalk using a blue/green deployment methodology.The Solutions Architect creates an environment that is identical to the existing application environment and deploys the application to the new environment.What should be done next to complete the update?Read More →

A company that is new to AWS reports it has exhausted its service limits across several accounts that are on the Basic Support plan.The company would like to prevent this from happening in the future.What is the MOST efficient way of monitoring and managing all service limits in the company’s accounts?Read More →

A company currently uses Amazon EBS and Amazon RDS for storage purposes.The company intends to use a pilot light approach for disaster recovery in a different AWS Region.The company has an RTO of 6 hours and an RPO of 24 hours.Which solution would achieve the requirements with MINIMAL cost?Read More →

A company has an Amazon EC2 deployment that has the following architecture:✑ An application tier that contains 8 m4.xlarge instances✑ A Classic Load Balancer✑ Amazon S3 as a persistent data storeAfter one of the EC2 instances fails, users report very slow processing of their requests.A Solutions Architect must recommend design changes to maximize system reliability.The solution must minimize costs.What should the Solutions Architect recommend?Read More →

A company standardized its method of deploying applications to AWS using AWS CodePipeline and AWS CloudFormation.The applications are in TypeScript andPython.The company has recently acquired another business that deploys applications to AWS using Python scripts.Developers from the newly acquired company are hesitant to move their applications under CloudFormation because it would require that they learn a new domain-specific language and eliminate their access to language features, such as looping.How can the acquired applications quickly be brought up to deployment standards while addressing the developers’ concerns?Read More →

A company has an Amazon VPC that is divided into a public subnet and a private subnet.A web application runs in Amazon VPC, and each subnet has its ownNACL.The public subnet has a CIDR of 10.0.0.0/24.An Application Load Balancer is deployed to the public subnet.The private subnet has a CIDR of 10.0.1.0/24.Amazon EC2 instances that run a web server on port 80 are launched into the private subnet.Only network traffic that is required for the Application Load Balancer to access the web application can be allowed to travel between the public and private subnets.What collection of rules should be written to ensure that the private subnet’s NACL meets the requirement? (Choose two.)Read More →

A company runs an application on a fleet of Amazon EC2 instances.The application requires low latency and random access to 100 GB of data.The application must be able to access the data at up to 3.000 IOPS.A Development team has configured the EC2 launch template to provision a 100-GB Provisioned IOPS(PIOPS) Amazon EBS volume with 3 000 IOPS provisioned.A Solutions Architect is tasked with lowering costs without impacting performance and durability.Which action should be taken?Read More →

A company wants to use a third-party software-as-a-service (SaaS) application.The third-party SaaS application is consumed through several API calls.The third- party SaaS application also runs on AWS inside a VPC.The company will consume the third-party SaaS application from inside a VPC.The company has internal security policies that mandate the use of private connectivity that does not traverse the internet.No resources that run in the company VPC are allowed to be accessed from outside the company’s VPC.All permissions must conform to the principles of least privilege.Which solution meets these requirements?Read More →

A company uses Amazon S3 to store documents that may only be accessible to an Amazon EC2 instance in a certain virtual private cloud (VPC).The company fears that a malicious insider with access to this instance could also set up an EC2 instance in another VPC to access these documents.Which of the following solutions will provide the required protection?Read More →

A company is running an application distributed over several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer.The security team requires that all application access attempts be made available for analysis.Information about the client IP address, connection type, and user agent must be included.Which solution will meet these requirements?Read More →