SAP-C01 (Page 49)

A Development team has created a series of AWS CloudFormation templates to help deploy services.They created a template for a network/virtual private cloud(VPC) stack, a database stack, a bastion host stack, and a web application-specific stack.Each service requires the deployment of at least:✑ A network/VPC stack✑ A bastion host stack✑ A web application stackEach template has multiple input parameters that make it difficult to deploy the services individually from the AWS CloudFormation console.The input parameters from one stack are typically outputs from other stacks.For example, the VPC ID, subnet IDs, and security groups from the network stack may need to be used in the application stack or database stack.Which actions will help reduce both the operational burden and the number of parameters passed into a service deployment? (Choose two.)Read More →

A company has an application behind a load balancer with enough Amazon EC2 instances to satisfy peak demand.Scripts and third-party deployment solutions are used to configure EC2 instances when demand increases or an instance fails.The team must periodically evaluate the utilization of the instance types to ensure that the correct sizes are deployed.How can this workload be optimized to meet these requirements?Read More →

A solutions architect needs to migrate 50 TB of NFS data to Amazon S3.The files are on several NFS file servers on corporate network.These are dense file systems containing tens of millions of small files.The system operators have configured the file interface on an AWS Snowball Edge device and are using a shell script to copy data.Developers report that copying the data to the Snowball Edge device is very slow.The solutions architect suspects this may be related to the overhead of encrypting all the small files and transporting them over the network.Which changes can be made to speed up the data transfer?Read More →

A North American company with headquarters on the East Coast is deploying a new web application running on Amazon EC2 in the us-east-1 Region.The application should dynamically scale to meet user demand and maintain resiliency.Additionally, the application must have disaster recover capabilities in an active-passive configuration with the us-west-1 Region.Which steps should a solutions architect take after creating a VPC in the us-east-1 Region?Read More →

A weather forecasting company is migrating an application that stores data on premises in a PostgreSQL database.The Company wants to migrate the database to Amazon Aurora PostgreSQL.The database size grows at an average rate of 5 GB daily and is currently 50 TB.The data center has an internet connection with50 Mbps of available bandwidth.The migration to AWS must be completed as soon as possible within the next 21 days.Which data transfer strategy meets these requirements with the LEAST amount of application downtime?Read More →

A company has multiple AWS accounts.The company recently had a security audit that revealed many unencrypted Amazon Elastic Block Store (Amazon EBS) volumes attached to Amazon EC2 instances.A solutions architect must encrypt the unencrypted volumes and ensure that unencrypted volumes will be detected automatically in the future.Additionally, the company wants a solution that can centrally manage multiple AWS accounts with a focus on compliance and security.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

An enterprise company’s data science team wants to provide a safe, cost-effective way to provide easy access to Amazon SageMaker.The data scientists have limited AWS knowledge and need to be able to launch a Jupyter notebook instance.The notebook instance needs to have a preconfigured AWS KMS key to encrypt data at rest on the machine learning storage volume without exposing the complex setup requirements.Which approach will allow the company to set up a self-service mechanism for the data scientists to launch Jupyter notebooks in its AWS accounts with theLEAST amount of operational overhead?Read More →

A company is running a legacy application on Amazon EC2 instances in multiple Availability Zones behind a software load balancer that runs on an active/standby set of EC2 instances.For disaster recovery, the company has created a warm standby version of the application environment that is deployed in another AWSRegion.The domain for the application uses a hosted zone from Amazon Route 53.The company needs the application to use static IP addresses, even in the case of a failover event to the secondary Region.The company also requires the client’s source IP address to be available for auditing purposes.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company with multiple accounts is currently using a configuration that does not meet the following security governance policies:✑ Prevent ingress from port 22 to any Amazon EC2 instance.✑ Require billing and application tags for resources.✑ Encrypt all Amazon EBS volumes.A solutions architect wants to provide preventive and detective controls, including notifications about a specific resource, if there are policy deviations.Which solution should the solutions architect implement?Read More →

A company is running a .NET three-tier web application on AWS.The team currently uses XL storage optimized instances to store and serve the website’s image and video files on local instance storage.The company has encountered issues with data loss from replication and instance failures.The Solutions Architect has been asked to redesign this application to improve its reliability while keeping costs low.Which solution will meet these requirements?Read More →