SAP-C01 (Page 48)

A company needs to create a centralized logging architecture for all of its AWS accounts.The architecture should provide near-real-time data analysis for all AWSCloudTrail logs and VPC Flow Logs across all AWS accounts.The company plans to use Amazon Elasticsearch Service (Amazon ES) to perform log analysis in the logging account.Which strategy a solutions architect use to meet these requirements?Read More →

A solutions architect must analyze a company’s Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to determine whether the company is using resources efficiently.The company is running several large, high-memory EC2 instances to host database clusters that are deployed in active/ passive configurations.The utilization of these EC2 instances varies by the applications that use the databases, and the company has not identified a pattern.The solutions architect must analyze the environment and take action based on the findings.Which solution meets these requirements MOST cost-effectively?Read More →

As a part of building large applications in the AWS Cloud, the Solutions Architect is required to implement the perimeter security protection.Applications running on AWS have the following endpoints:✑ Application Load Balancer✑ Amazon API Gateway regional endpoint✑ Elastic IP address-based EC2 instances.✑ Amazon S3 hosted websites.✑ Classic Load BalancerThe Solutions Architect must design a solution to protect all of the listed web front ends and provide the following security capabilities:✑ DDoS protection✑ SQL injection protection✑ IP address whitelist/blacklist✑ HTTP flood protection✑ Bad bot scraper protectionHow should the Solutions Architect design the solution?Read More →

A company wants to migrate its website from an on-premises data center onto AWS.At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency.The company’s security policy states that privileges and network permissions must be configured according to best practice, using least privilege.A Solutions Architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster.What steps are required after the deployment to meet the requirements? (Choose two.)Read More →

A company is migrating its marketing website and content management system from an on-premises data center to AWS.The company wants the AWS application to be deployed in a VPC with Amazon EC2 instances used for the web servers and an Amazon RDS instance for the database.The company has a runbook document that describes the installation process of the on-premises system.The company would like to base the AWS system on the processes referenced in the runbook document.The runbook document describes the installation and configuration of the operating systems, network settings, the website, and content management system software on the servers.After the migration is complete, the company wants to be able to make changes quickly to take advantage of other AWS features.How can the application and environment be deployed and automated in AWS, while allowing for future changes?Read More →

A company is adding a new approved external vendor that only supports IPv6 connectivity.The company’s backend systems sit in the private subnet of anAmazon VPC.The company uses a NAT gateway to allow these systems to communicate with external vendors over IPv4.Company policy requires systems that communicate with external vendors to use a security group that limits access to only approved external vendors.The virtual private cloud (VPC) uses the default network ACL.The Systems Operator successfully assigns IPv6 addresses to each of the backend systems.The Systems Operator also updates the outbound security group to include the IPv6 CIDR of the external vendor (destination).The systems within the VPC are able to ping one another successfully over IPv6.However, these systems are unable to communicate with the external vendor.What changes are required to enable communication with the external vendor?Read More →

A company has a new security policy.The policy requires the company to log any event that retrieves data from Amazon S3 buckets.The company must save these audit logs in a dedicated S3 bucket.The company created the audit logs S3 bucket in an AWS account that is designated for centralized logging.The S3 bucket has a bucket policy that allows write- only cross-account access.A solutions architect must ensure that all S3 object-level access is being logged for current S3 buckets and future S3 buckets.Which solution will meet these requirements?Read More →

A Solutions Architect is designing the storage layer for a data warehousing application.The data files are large, but they have statically placed metadata at the beginning of each file that describes the size and placement of the file’s index.The data files are read in by a fleet of Amazon EC2 instances that store the index size, index location, and other category information about the data file in a database.That database is used by Amazon EMR to group files together for deeper analysis.What would be the MOST cost-effective, high availability storage solution for this workflow?Read More →

A Solutions Architect is designing a network solution for a company that has applications running in a data center in Northern Virginia.The applications in the company’s data center require predictable performance to applications running in a virtual private cloud (VPC) located in us-east-1, and a secondary VPC in us- west-2 within the same account.The company data center is collocated in an AWS Direct Connect facility that serves the us-east-1 region.The company has already ordered an AWS Direct Connect connection and a cross-connect has been established.Which solution will meet the requirements at the LOWEST cost?Read More →

A company operating a website on AWS requires high levels of scalability, availability, and performance. The company is running a Ruby on Rails application onAmazon EC2. It has a data tier on MySQL 5.6 on Amazon EC2 using 16 TB of Amazon EBS storage Amazon CloudFront is used to cache application content.The Operations team is reporting continuous and unexpected growth of EBS volumes assigned to the MySQL database. The Solutions Architect has been asked to design a highly scalable, highly available, and high-performing solution.Which solution is the MOST cost-effective at scale?Read More →