SAP-C01 (Page 57)

A medical company is running a REST API on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group behind an Application LoadBalancer (ALB).The ALB runs in three public subnets, and the EC2 instances run in three private subnets.The company has deployed an Amazon CloudFront distribution that has the ALB as the only origin.Which solution should a solutions architect recommend to enhance the origin security?Read More →

A solutions architect has launched multiple Amazon EC2 instances in a placement group within a single Availability Zone.Because of additional load on the system, the solutions architect attempts to add new instances to the placement group.However, the solutions architect receives an insufficient capacity error.What should the solutions architect do to troubleshoot this issue?Read More →

A developer reports receiving an Error 403: Access Denied message when they try to download an object from an Amazon S3 bucket.The S3 bucket is accessed using an S3 endpoint inside a VPC, and is encrypted with an AWS KMS key.A solutions architect has verified that the developer is assuming the correct IAM role in the account that allows the object to be downloaded.The S3 bucket policy and the NACL are also valid.Which additional step should the solutions architect take to troubleshoot this issue?Read More →

A solutions architect needs to review the design of an Amazon EMR cluster that is using the EMR File System (EMRFS).The cluster performs tasks that are critical to business needs.The cluster is running Amazon EC2 On-Demand Instances at all times for all task, master, and core nodes.The EMR tasks run each morning, starting at 1:00 AM.and take 6 hours to finish running.The amount of time to complete the processing is not a priority because the data is not referenced until late in the day.The solutions architect must review the architecture and suggest a solution to minimize the compute costs.Which solution should the solutions architect recommend to meet these requirements?Read More →

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →

A company is running a custom database in the AWS Cloud.The database uses Amazon EC2 for compute and uses Amazon Elastic Block Store (Amazon EBS) for storage.The database runs on the latest generation of EC2 instances and uses a General Purpose SSD (gp2) EBS volume for data.The current data volume has the following characteristics:✑ The volume is 512 GB in size.✑ The volume never goes above 256 GB utilization.✑ The volume consistently uses around 1,500 IOPS.A solutions architect needs to conduct an analysis of the current database storage layer and make a recommendation about ways to reduce cost.Which solution will provide the MOST cost savings without impacting the performance of the database?Read More →

A company has more than 10,000 sensors that send data to an on-premises Apache Kafka server by using the Message Queuing Telemetry Transport (MQTT) protocol.The on-premises Kafka server transforms the data and then stores the results as objects in an Amazon S3 bucket.Recently, the Kafka server crashed.The company lost sensor data while the server was being restored.A solutions architect must create a new design on AWS that is highly available and scalable to prevent a similar occurrence.Which solution will meet these requirements?Read More →

A company is planning to migrate an application from on premises to the AWS Cloud.The company will begin the migration by moving the application’s underlying data storage to AWS.The application data is stored on a shared file system on premises, and the application servers connect to the shared file system throughSMB.A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage.Until the application is fully migrated and code is rewritten to use native Amazon S3 APIs, the application must continue to have access to the data through SMB.The solutions architect must migrate the application data toAWS to its new location while still allowing the on-premises application to access the data.Which solution will meet these requirements?Read More →

A United Kingdom (UK) company recently completed a successful proof of concept in Amazon WorkSpaces.The company also has a large office in the UnitedStates (US).Staff members from each office regularly travel between the two locations and need access to a corporate WorkSpace without any reconfiguration of their WorkSpaces client.The company has purchased a domain by using Amazon Route 53 for the connection alias.The company will use a Windows profile and document management solution.A solutions architect needs to design the full solution.The solution must use a configuration of WorkSpaces in two AWS Regions and must provide Regional resiliency.Which solution will meet these requirements?Read More →

A company in the United States (US) has acquired a company in Europe.Both companies use the AWS Cloud.The US company has built a new application with a microservices architecture.The US company is hosting the application across five VPCs in the us-east-2 Region.The application must be able to access resources in one VPC in the eu-west-1 Region.However, the application must not be able to access any other VPCs.The VPCs in both Regions have no overlapping CIDR ranges.All Accounts are already consolidated in one organization in AWS Organizations.Which solution will meet these requirements MOST cost-effectively?Read More →