SAP-C01 (Page 41)

A company’s site reliability engineer is performing a review of Amazon FSx for Windows File Server deployments within an account that the company acquired.Company policy states that all Amazon FSx file systems must be configured to be highly available across Availability Zones.During the review, the site reliability engineer discovers that one of the Amazon FSx file systems used a deployment type of Single-AZ 2.A solutions architect needs to minimize downtime while aligning this Amazon FSx file system with company policy.What should the solutions architect do to meet these requirements?Read More →

A company recently deployed a new application that runs on a group of Amazon EC2 Linux instances in a VPC.In a peered VPC, the company launched an EC2Linux instance that serves as a bastion host.The security group of the application instances allows access only on TCP port 22 from the private IP of the bastion host.The security group of the bastion host allows access to TCP port 22 from 0.0.0.0/0 so that system administrators can use SSH to remotely log in to the application instances from several branch offices.While looking through operating system logs on the bastion host, a cloud engineer notices thousands of failed SSH logins to the bastion host from locations around the world.The cloud engineer wants to change how remote access is granted to the application instances and wants to meet the following requirements:✑ Eliminate brute-force SSH login attempts.✑ Retain a log of commands run during an SSH session.✑ Retain the ability to forward ports.Which solution meets these requirements for remote access to the application instances?Read More →

A company has an existing on-premises three-tier web application.The Linux web servers serve content from a centralized file share on a NAS server because the content is refreshed several times a day from various sources.The existing infrastructure is not optimized and the company would like to move to AWS in order to gain the ability to scale resources up and down in response to load.On-premises and AWS resources are connected using AWS Direct Connect.How can the company migrate the web infrastructure to AWS without delaying the content refresh process?Read More →

A company is migrating an on-premises application and a MySQL database to AWS.The application processes highly sensitive data, and new data is constantly updated in the database.The data must not be transferred over the internet.The company also must encrypt the data in transit and at rest.The database is 5 TB in size.The company already has created the database schema in an Amazon RDS for MySQL DB instance.The company has set up a 1 Gbps AWS Direct Connect connection to AWS.The company also has set up a public VIF and a private VIF.A solutions architect needs to design a solution that will migrate the data to AWS with the least possible downtime.Which solution will meet these requirements?Read More →

A user is thinking to use EBS PIOPS volume.Which of the below mentioned options is a right use case for the PIOPS EBS volume?Read More →

An organization is setting up a multi-site solution where the application runs on premise as well as on AWS to achieve the minimum recovery time objective(RTO).Which of the below mentioned configurations will not meet the requirements of the multi-site solution scenario?Read More →

Which of the following is true of an instance profile when an IAM role is created using the console?Read More →

Which of the following is true while using an IAM role to grant permissions to applications running on Amazon EC2 instances?Read More →

When using string conditions within IAM, short versions of the available comparators can be used instead of the more verbose ones.streqi is the short version of the _______ string condition.Read More →

Which of the following cannot be done using AWS Data Pipeline?Read More →