SAP-C01 (Page 51)

A company is using a single AWS Region for its ecommerce website.The website includes a web application that runs on several Amazon EC2 instances behind an Application Load Balancer (ALB).The website also includes an Amazon DynamoDB table.A custom domain name in Amazon Route 53 is linked to the ALB.The company created an SSL/TLS certificate in AWS Certificate Manager (ACM) and attached the certificate to the ALB.The company is not using a content delivery network as part of its design.The company wants to replicate its entire application stack in a second Region to provide disaster recovery, plan for future growth, and provide improved access time to users.A solutions architect needs to implement a solution that achieves these goals and minimizes administrative overhead.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company has IoT sensors that monitor traffic patterns throughout a large city.The company wants to read and collect data from the sensors and perform aggregations on the data.A solutions architect designs a solution in which the IoT devices are streaming to Amazon Kinesis Data Streams.Several applications are reading from the stream.However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.Which actions should the solutions architect take to resolve this issue? (Choose three.)Read More →

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using multiple AWS accounts.The company has a shared service account and several other accounts for different projects.A team has a VPC in a project account.The team wants to connect this VPC to a corporate network through an AWS Direct Connect gateway that exists in the shared services account.The team wants to automatically perform a virtual private gateway association with the Direct Connect gateway by using an already- tested AWS Lambda function while deploying its VPC networking stack.The Lambda function code can assume a role by using AWS Security Token Service(AWS STS).The team is using AWS CloudFormation to deploy its infrastructure.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company wants to migrate its corporate data center from on premises to the AWS Cloud.The data center includes physical servers and VMs that use VMware and Hyper-V.An administrator needs to select the correct services to collect data for the initial migration discovery process.The data format should be supported by AWS Migration Hub.The company also needs the ability to generate reports from the data.Which solution meets these requirements?Read More →

A company is using an on-premises Active Directory service for user authentication.The company wants to use the same authentication service to sign in to the company’s AWS accounts, which are using AWS Organizations.AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company’s AWS accounts.The company’s security policy requires conditional access to the accounts based on user groups and roles.User identities must be managed in a single location.Which solution will meet these requirements?Read More →

A company hosts a web application on AWS in the us-east-1 Region.The application servers are distributed across three Availability Zones behind an ApplicationLoad Balancer.The database is hosted in MySQL database on an Amazon EC2 instance.A solutions architect needs to design a cross-Region data recovery solution using AWS services with an RTO of less than 5 minutes and an RPO of less than 1 minute.The solutions architect is deploying application servers in us- west-2, and has configured Amazon Route 53 health checks and DNS failover to us-west-2.Which additional step should the solutions architect take?Read More →

A solutions architect is designing a network for a new cloud deployment.Each account will need autonomy to modify route tables and make changes.Centralized and controlled egress internet connectivity is also needed.The cloud footprint is expected to grow to thousands of AWS accounts.Which architecture will meet these requirements?Read More →

A company is developing and hosting several projects in the AWS Cloud.The projects are developed across multiple AWS accounts under the same organization in AWS Organizations.The company requires the cost for cloud infrastructure to be allocated to the owning project.The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.Which actions should a solutions architect take to resolve the problem and prevent it from happening in the future? (Choose three.)Read More →

What types of identities do Amazon Cognito identity pools support?Read More →