SAP-C01 (Page 40)

A company wants to retire its Oracle Solaris NFS storage arrays.The company requires rapid data migration over its internet network connection to a combination of destinations for Amazon S3, Amazon Elastic File System (Amazon EFS), and Amazon FSx for Windows File Server.The company also requires a full initial copy, as well as incremental transfers of changes until the retirement of the storage arrays.All data must be encrypted and checked for integrity.What should a solutions architect recommend to meet these requirements?Read More →

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS.The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC.The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company that uses AWS Organizations is creating several new AWS accounts.The company is setting up controls to properly allocate AWS costs to business units.The company must implement a solution to ensure that all resources include a tag that has a key of costcenter and a value from a predefined list of business units.The solution must send a notification each time a resource tag does not meet these criteria.The solution must not prevent the creation of resources.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS Organizations to manage its AWS accounts.The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage.The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?Read More →

A video processing company wants to build a machine learning (ML) model by using 600 TB of compressed data that is stored as thousands of files in the company’s on-premises network attached storage system.The company does not have the necessary compute resources on premises for ML experiments and wants to use AWS.The company needs to complete the data transfer to AWS within 3 weeks.The data transfer will be a one-time transfer.The data must be encrypted in transit.The measured upload speed of the company’s internet connection is 100 Mbps, and multiple departments share the connection.Which solution will meet these requirements MOST cost-effectively?Read More →

A company wants to change its internal cloud billing strategy for each of its business units.Currently, the cloud governance team shares reports for overall cloud spending with the head of each business unit.The company uses AWS Organizations to manage the separate AWS accounts for each business unit.The existing tagging standard in Organizations includes the application, environment, and owner.The cloud governance team wants a centralized solution so each business unit receives monthly reports on its cloud spending.The solution should also send notifications for any cloud spending that exceeds a set threshold.Which solution is the MOST cost-effective way to meet these requirements?Read More →

A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company uses AWS Control Tower for governance and uses AWS Transit Gateway for VPC connectivity across accounts.In an AWS application account, the company’s application team has deployed a web application that uses AWS Lambda and Amazon RDS.The company’s database administrators have a separate DBA account and use the account to centrally manage all the databases across the organization.The database administrators use an Amazon EC2 instance that is deployed in the DBA account to access an RDS database that is deployed in the application account.The application team has stored the database credentials as secrets in AWS Secrets Manager in the application account.The application team is manually sharing the secrets with the database administrators.The secrets are encrypted by the default AWS managed key for Secrets Manager in the application account.A solutions architect needs to implement a solution that gives the database administrators access to the database and eliminates the need to manually share the secrets.Which solution will meet these requirements?Read More →

A company hosts a legacy application that runs on an Amazon EC2 instance inside a VPC without internet access.Users access the application with a desktop program installed on their corporate laptops.Communication between the laptops and the VPC flows through AWS Direct Connect (DX).A new requirement states that all data in transit must be encrypted between users and the VPC.Which strategy should a solutions architect use to maintain consistent network performance while meeting this new requirement?Read More →

A company wants to use Amazon WorkSpaces in combination with thin client devices to replace aging desktops.Employees use the desktops to access applications that work with clinical trial data.Corporate security policy states that access to the applications must be restricted to only company branch office locations.The company is considering adding an additional branch office in the next 6 months.Which solution meets these requirements with the MOST operational efficiency?Read More →

A company has a single AWS master billing account, which is the root of the AWS Organizations hierarchy.The company has multiple AWS accounts within this hierarchy, all organized into organization units (OUs).More OUs and AWS accounts will continue to be created as other parts of the business migrate applications to AWS.These business units may need to use different AWS services.The Security team is implementing the following requirements for all current and future AWS accounts:✑ Control policies must be applied across all accounts to prohibit AWS servers.✑ Exceptions to the control policies are allowed based on valid use cases.Which solution will meet these requirements with minimal optional overhead?Read More →