SAP-C01 (Page 40)

A large industrial company has two AWS accounts.One account is for production, and one account is for development.The company manages the production account under its corporate organization in AWS Organizations.The development account is an isolated environment that developers use for testing.The company stores all the application configuration information in an Amazon S3 bucket in the production account.All developers in the development account are members of a single IAM group.A solutions architect must ensure that the developers can update the application configuration information in real time.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company’s compliance audit reveals that some Amazon Elastic Block Store (Amazon EBS) volumes that were created in an AWS account were not encrypted.A solutions architect must implement a solution to encrypt all new EBS volumes at rest.Which solution will meet this requirement with the LEAST effort?Read More →

A Solutions Architect is designing a multi-account structure that has 10 existing accounts.The design must meet the following requirements:✑ Consolidate all accounts into one organization.✑ Allow full access to the Amazon EC2 service from the master account and the secondary accounts.✑ Minimize the effort required to add additional secondary accounts.Which combination of steps should be included in the solution? (Choose two.)Read More →

A company has a large on-premises Apache Hadoop cluster with a 20 PB HDFS database.The cluster is growing every quarter by roughly 200 instances and 1PB.The company’s goals are to enable resiliency for its Hadoop data, limit the impact of losing cluster nodes, and significantly reduce costs.The current cluster runs 24/7 and supports a variety of analysis workloads, including interactive queries and batch processing.Which solution would meet these requirements with the LEAST expense and down time?Read More →

A company has an online shop that uses an Amazon API Gateway API, AWS Lambda functions, and an Amazon DynamoDB table provisioned with 900 RCUs.The API Gateway API receives requests from customers, and the Lambda functions handle the requests.Some of the Lambda functions read data from theDynamoDB table.During peak hours, customers are reporting timeout errors and slow performance.An investigation reveals that the Lambda functions that read the DynamoDB table occasionally time out.Amazon CloudWatch metrics show that the peak usage of the DynamoDB table is just below 900 RCUs.Which solution will resolve this issue MOST cost-effectively?Read More →

A company has a requirement that only allows specially hardened AMIs to be launched into public subnets in a VPC, and for the AMIs to be associated with a specific security group.Allowing non-compliant instances to launch into the public subnet could present a significant security risk if they are allowed to operate.A mapping of approved AMIs to subnets to security groups exists in an Amazon DynamoDB table in the same AWS account.The company created an AWSLambda function that, when invoked, will terminate a given Amazon EC2 instance if the combination of AMI, subnet, and security group are not approved in theDynamoDB table.What should the Solutions Architect do to MOST quickly mitigate the risk of compliance deviations?Read More →

A Solutions Architect must migrate an existing on-premises web application with 70 TB of static files supporting a public open-data initiative.The Architect wants to upgrade to the latest version of the host operating system as part of the migration effort.Which is the FASTEST and MOST cost-effective way to perform the migration?Read More →

A company operates quick-service restaurants.The restaurants follow a predictable model with high sales traffic for 4 hours daily.Sales traffic is lower outside of those peak hours.The point of sale and management platform is deployed in the AWS Cloud and has a backend that is based on Amazon DynamoDB.The database table uses provisioned throughput mode with 100,000 RCUs and 80,000 WCUs to match known peak resource consumption.The company wants to reduce its DynamoDB cost and minimize the operational overhead for the IT staff.Which solution meets these requirements MOST cost-effectively?Read More →

A company wants to use a hybrid cloud architecture between an on-premises data center and AWS.The company already has deployed a multi-account structure in AWS Organizations while following the AWS Well-Architected Framework.Due to strict security requirements, connectivity between the data center and AWS must be encrypted in transit.Only a single entry point into AWS is permitted from the data center.The data center must be able to access all the AWS accounts.Which solution meets these requirements?Read More →

A company is using AWS CloudFormation to deploy its infrastructure.The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted.How can the company prevent users from accidentally deleting data in this way?Read More →