SAP-C01 (Page 47)

A company is serving files to its customer through an SFTP server that is accessible over the Internet.The SFTP server is running on a single Amazon EC2 instance with an Elastic IP address attached.Customers connect to the SFTP server through its Elastic IP address and use SSH for authentication.The EC2 instance also has an attached security group that allows access from all customer IP addresses.A solutions architect must implement a solution to improve availability, minimize the complexity of infrastructure management, and minimize the disruption to customers who access files.The solution must not change the way customers connect.Which solution will meet these requirements?Read More →

A company maintains a restaurant review website.The website is a single-page application where files are stored in Amazon S3 and delivered using AmazonCloudFront.The company receives several fake postings every day that are manually removed.The security team has identified that most of the fake posts are from bots with IP addresses that have a bad reputation within the same global region.The team needs to create a solution to help restrict the bots from accessing the website.Which strategy should a solutions architect use?Read More →

A company needs to move its on-premises resources to AWS.The current environment consists of 100 virtual machines (VMs) with a total of 40 TB of storage.Most of the VMs can be taken offline because they support functions during business hours only, however, some are mission critical, so downtime must be minimized.The administrator of the on-premises network provisioned 10 Mbps of internet bandwidth for the migration.The on-premises network throughput has reached capacity and would be costly to increase.A solutions architect must design a migration solution that can be performed within the next 3 months.Which method would fulfill these requirements?Read More →

You have setup an Auto Scaling group.The cool down period for the Auto Scaling group is 7 minutes.The first scaling activity request for the Auto Scaling group is to launch two instances.It receives the activity question at time “t”, and the first instance is launched at t+3 minutes, while the second instance is launched at t+4 minutes.How many minutes after time “t” will Auto Scaling accept another scaling activity request?Read More →

A company wants to launch an online shopping website in multiple countries and must ensure that customers are protected against potential `man-in-the-middle` attacks.Which architecture will provide the MOST secure site access?Read More →

A video streaming company recently launched a mobile app for video sharing.The app uploads various files to an Amazon S3 bucket in the us-east-1 Region.The files range in size from 1 GB to 10 GB.Users who access the app from Australia have experienced uploads that take long periods of time.Sometimes the files fail to completely upload for these users.A solutions architect must improve the app’s performance for these uploads.Which solutions will meet these requirements? (Choose two.)Read More →

A company has multiple lines of business (LOBs) that roll up to the parent company.The company has asked its solutions architect to develop a solution with the following requirements:✑ Produce a single AWS invoice for all of the AWS accounts used by its LOBs.✑ The costs for each LOB account should be broken out on the invoice.✑ Provide the ability to restrict services and features in the LOB accounts, as defined by the company’s governance policy.✑ Each LOB account should be delegated full administrator permissions, regardless of the governance policy.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

An enterprise company wants to implement cost controls for all its accounts in AWS Organizations, which has full features enabled.The company has mapped organizational units (OUs) to its business units, and it wants to bill these business units for their individual AWS spending.There has been a recent spike in the company’s AWS bill, which is generating attention from the Finance team.A Solutions Architect needs to investigate the cause of the spike while designing a solution that will track AWS costs in Organizations and generate a notification to the required teams if costs from a business unit exceed a specific monetary threshold.Which solution will meet these requirements?Read More →

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company’s AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a singleAWS Region. The company has set up routing from the shared services VPC to other VPCs.Which steps should the solutions architect recommend to meet these requirements? (Choose three.)Read More →

A company runs an application on AWS.An AWS Lambda function uses credentials to authenticate to an Amazon RDS for MySQL DB instance.A security risk assessment identified that these credentials are not frequently rotated.Also, encryption at rest is not enabled for the DB instance.The security team requires that both of these issues be resolved.Which strategy should a solutions architect recommend to remediate these security risks?Read More →