SAP-C01 (Page 46)

A company uses multiple AWS accounts in a single AWS Region.A solutions architect is designing a solution to consolidate logs generated by Elastic LoadBalancers (ELBs) in the AppDev, AppTest, and AppProd accounts.The logs should be stored in an existing Amazon S3 bucket named s3-elb-logs in the centralAWS account.The central account is used for log consolidation only and does not have ELBs deployed.ELB logs must be encrypted at rest.Which combination of steps should the solutions architect take to build the solution? (Choose two.)Read More →

A company has set up a multi-account AWS environment by using AWS Control Tower.Each AWS account that AWS Control Tower creates has its own VPC.The company is developing an application that will integrate with many microservices.The company has designated a specific account to host the application.The company will deploy the microservices on Amazon EC2 instances and will implement the microservices across multiple AWS accounts.The microservices require a high degree of interconnectivity.The company needs a solution that will give the application the ability to communicate privately with the microservices.The solution also must minimize cost and operational overhead.Which solution will meet these requirements?Read More →

A company is running a distributed application on a set of Amazon EC2 instances in an Auto Scaling group.The application stores large amounts of data on anAmazon Elastic File System (Amazon EFS) file system, and new data is generated monthly.The company needs to back up the data in a secondary AWS Region to restore from in case of a performance problem in its primary Region.The company has an RTO of 1 hour.A solutions architect needs to create a backup strategy while minimizing the extra cost.Which backup strategy should the solutions architect recommend to meet these requirements?Read More →

A company’s factory and automation applications are running in a single VPC.More than 20 applications run on a combination of Amazon EC2, Amazon ElasticContainer Service (Amazon ECS), and Amazon RDS.The company has software engineers spread across three teams.One of the three teams owns each application, and each time is responsible for the cost and performance of all of its applications.Team resources have tags that represent their application and team.The teams use IAM access for daily activities.The company needs to determine which costs on the monthly AWS bill are attributable to each application or team.The company also must be able to create reports to compare costs from the last 12 months and to help forecast costs for the next 12 months.A solutions architect must recommend an AWS Billing andCost Management solution that provides these cost reports.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company has a photo sharing social networking application.To provide a consistent experience for users, the company performs some image processing on the photos uploaded by users before publishing on the application.The image processing is implemented using a set of Python libraries.The current architecture is as follows:✑ The image processing Python code runs in a single Amazon EC2 instance and stores the processed images in an Amazon S3 bucket named ImageBucket.✑ The front-end application, hosted in another bucket, loads the images from ImageBucket to display to users.With plans for global expansion, the company wants to implement changes in its existing architecture to be able to scale for increased demand on the application and reduce management complexity as the application scales.Which combination of changes should a solutions architect make? (Choose two.)Read More →

A company is migrating its data center from on premises to the AWS Cloud.The migration will take several months to complete.The company will use AmazonRoute 53 for private DNS zones.During the migration, the company must keep its AWS services pointed at the VPC’s Route 53 Resolver for DNS.The company also must maintain the ability to resolve addresses from its on-premises DNS server.A solutions architect must set up DNS so that Amazon EC2 instances can use native Route 53 endpoints to resolve on-premises DNS queries.Which configuration will meet these requirements?Read More →

A company manages hundreds of AWS accounts centrally in an organization in AWS Organizations.The company recently started to allow product teams to create and manage their own S3 access points in their accounts.The S3 access points can be accessed only within VPCs, not on the Internet.What is the MOST operationally efficient way to enforce this requirement?Read More →

An AWS customer has a web application that runs on premises.The web application fetches data from a third-party API that is behind a firewall.The third party accepts only one public CIDR block in each client’s allow list.The customer wants to migrate their web application to the AWS Cloud.The application will be hosted on a set of Amazon EC2 instances behind an ApplicationLoad Balancer (ALB) in a VPC.The ALB is located in public subnets.The EC2 instances are located in private subnets.NAT gateways provide internet access to the private subnets.How should a solutions architect ensure that the web application can continue to call the third-party API after the migration?Read More →

A company recently completed a large-scale migration to AWS.Development teams that support various business units have their own accounts in AWSOrganizations.A central cloud team is responsible for controlling which services and resources can be accessed, and for creating operational strategies for all teams within the company.Some teams are approaching their account service quotas.The cloud team needs to create an automated and operationally efficient solution to proactively monitor service quotas.Monitoring should occur every 15 minutes and send alerts when a team exceeds 80% utilization.Which solution will meet these requirements?Read More →

A financial company needs to create a separate AWS account for a new digital wallet application.The company uses AWS Organizations to manage its accounts.A solutions architect uses the IAM user Support1 from the master account to create a new member account with [email protected] as the email address.What should the solutions architect do to create IAM users in the new member account?Read More →