SAP-C01 (Page 53)

What happens when Dedicated instances are launched into a VPC?Read More →

A company has an organization in AWS Organizations.The company has enabled trusted access between Organizations and AWS Resource Access Manager(AWS RAM).The organization includes three AWS accounts, one each for shared services, development, and production.The shared services account has aVPC.A solutions architect needs to meet the following requirements:* Configure access between the shared services VPC and the development and production accounts.* Ensure that workloads in each account are deployed to at least three Availability Zones.* Ensure that there is no direct communication between the development and production workloads.Which combination of steps will meet these requirements? (Choose three.)Read More →

A solutions architect has developed a web application that uses an Amazon API Gateway Regional endpoint and an AWS Lambda function.The consumers of the web application are all close to the AWS Region where the application will be deployed.The Lambda function only queries an Amazon Aurora MySQL database.The solutions architect has configured the database to have three read replicas.During testing, the application does not meet performance requirements.Under high load, the application opens a large number of database connections.The solutions architect must improve the application’s performance.Which actions should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company is running a web application on Amazon EC2 instances in a production AWS account.The company requires all logs generated from the web application to be copied to a central AWS account for analysis and archiving.The company’s AWS accounts are currently managed independently.Logging agents are configured on the EC2 instances to upload the log files to an Amazon S3 bucket in the central AWS account.A solutions architect needs to provide access for a solution that will allow the production account to store log files in the central account.The central account also needs to have read access to the log files.What should the solutions architect do to meet these requirements?Read More →

The CISO of a large enterprise with multiple IT departments, each with its own AWS account, wants one central place where AWS permissions for users can be managed and users authentication credentials can be synchronized with the company’s existing on-premises solution.Which solution will meet the CISO’s requirements?Read More →

A company wants to host its website on AWS using serverless architecture design patterns for global customers.The company has outlined its requirements as follow:✑ The website should be responsive.✑ The website should offer minimal latency.✑ The website should be highly available.✑ Users should be able to authenticate through social identity providers such as Google, Facebook, and Amazon.✑ There should be baseline DDoS protections for spikes in traffic.How can the design requirements be met?Read More →

A company had a tight deadline to migrate its on-premises environment to AWS.It moved over Microsoft SQL Servers and Microsoft Windows Servers using the virtual machine import/export service and rebuild other applications native to the cloud.The team created both Amazon EC2 databases and used Amazon RDS.Each team in the company was responsible for migrating their applications, and they have created individual accounts for isolation of resources.The company did not have much time to consider costs, but now it would like suggestions on reducing its AWS spend.Which steps should a Solutions Architect take to reduce costs?Read More →

A company is running an image-processing service in the AWS Cloud.Users upload images to an Amazon S3 bucket for processing.When an image is uploaded to the S3 bucket, several microservices that are based on AWS Lambda functions need to perform different processing tasks on the image.Each task’s processing must start immediately after an image is uploaded.Which solution will meet these requirements?Read More →

A company has decided to move some workloads onto AWS to create a grid environment to run market analytics.The grid will consist of many similar instances, spun-up by a job-scheduling function.Each time a large analytics workload is completed, a new VPC is deployed along with job scheduler and grid nodes.Multiple grids could be running in parallel.Key requirements are:✑ Grid instances must communicate with Amazon S3 to retrieve data to be processed.✑ Grid instances must communicate with Amazon DynamoDB to track intermediate data.✑ The job scheduler needs only to communicate with the Amazon EC2 API to start new grid nodes.A key requirement is that the environment has no access to the internet, either directly or via the on-premises proxy.However, the application needs to be able to seamlessly communicate to Amazon S3, Amazon DynamoDB, and Amazon EC2 API, without the need for reconfiguration for each new deployment.Which of the following should the Solutions Architect do to achieve this target architecture? (Choose three.)Read More →

A company must deploy multiple independent instances of an application.The front-end application is internet accessible.However, corporate policy stipulates that the backends are to be isolated from each other and the internet, yet accessible from a centralized administration server.The application setup should be automated to minimize the opportunity for mistakes as new instances are deployed.Which option meets the requirements and MINIMIZES costs?Read More →