SAP-C01 (Page 47)

A company hosts a blog post application on AWS using Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.The application currently does not useAPI keys to authorize requests.The API model is as follows:GET/posts/[postid] to get post detailsGET/users[userid] to get user detailsGET/comments/[commentid] to get comments detailsThe company has noticed users are actively discussing topics in the comments section, and the company wants to increase user engagement by marking the comments appears in real time.Which design should be used to reduce comment latency and improve user experience?Read More →

A media company has a static web application that is generated programmatically.The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront.The build pipeline runs inside a Build Account.The S3 bucket and CloudFront distribution are in a Distribution Account.The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account.The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI).During testing all attempts to access the application using the CloudFront URL result in anHTTP 403 Access Denied response.What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?Read More →

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ׀¢׀’ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

Which of the following does Amazon DynamoDB perform?Read More →

Which of the following statements is correct about AWS Direct Connect?Read More →

A company hosts a game player-matching service on a public facing, physical, on-premises instance that all users are able to access over the internet.All traffic to the instance uses UDP.The company wants to migrate the service to AWS and provide a high level of security.A solutions architect needs to design a solution for the player-matching service using AWS.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company recently transformed its legacy infrastructure provisioning scripts to AWS CloudFormation templates.The newly developed templates are hosted in the company’s private GitHub repository.Since adopting CloudFormation, the company has encountered several issues with updates to the CloudFormation templates, causing execution or creating environment.Management is concerned by the increase in errors and has asked a Solutions Architect to design the automated testing of CloudFormation template updates.What should the Solution Architect do to meet these requirements?Read More →

A company that runs applications on AWS recently subscribed to a new software-as-a-service (SaaS) data vendor.The vendor provides the data by way of aREST API that the vendor hosts in its AWS environment.The vendor offers multiple options for connectivity to the API and is working with the company to find the best way to connect.The company’s AWS account does not allow outbound internet access from its AWS environment.The vendor’s services run on AWS in the same Region as the company’s applications.A solutions architect must implement connectivity to the vendor’s API so that the API is highly available in the company’s VPC.Which solution will meet these requirements?Read More →

A company that develops consumer electronics with offices in Europe and Asia has 60 TB of software images stored on premises in Europe.The company wants to transfer the images to an Amazon S3 bucket in the ap-northeast-1 Region.New software images are created daily and must be encrypted in transit.The company needs a solution that does not require custom development to automatically transfer all existing and new software images to Amazon S3.What is the next step in the transfer process?Read More →

A company that is developing a mobile game is making game assets available in two AWS Regions.Game assets are served from a set of Amazon EC2 instances behind an Application Load Balancer (ALB) in each Region.The company requires game assets to be fetched from the closest Region.If game assets become unavailable in the closest Region, they should be fetched from the other Region.What should a solutions architect do to meet these requirements?Read More →