SAP-C01 (Page 6)

A company runs a popular public-facing ecommerce website.Its user base is growing quickly from a local market to a national market.The website is hosted in an on-premises data center with web servers and a MySQL database.The company wants to migrate its workload to AWS.A solutions architect needs to create a solution to:✑ Improve security✑ Improve reliability✑ Improve availability✑ Reduce latency✑ Reduce maintenanceWhich combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

An advisory firm is creating a secure data analytics solution for its regulated financial services users.Users will upload their raw data to an Amazon S3 bucket, where they have PutObject permissions only.Data will be analyzed by applications running on an Amazon EMR cluster launched in a VPC.The firm requires that the environment be isolated from the internet.All data at rest must be encrypted using keys controlled by the firm.Which combination of actions should the Solutions Architect take to meet the user’s security requirements? (Choose two.)Read More →

A company is migrating applications from on premises to the AWS Cloud.These applications power the company’s internal web forms.These web forms collect data for specific events several times each quarter.The web forms use simple SQL statements to save the data to a local relational database.Data collection occurs for each event, and the on-premises servers are idle most of the time.The company needs to minimize the amount of idle infrastructure that supports the web forms.Which solution will meet these requirements?Read More →

A retail company is operating its ecommerce application on AWS.The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The company uses an Amazon RDS DB instance as the database backend.Amazon CloudFront is configured with one origin that points to the ALB.Static content is cached.Amazon Route 53 is used to host all public zones.After an update of the application, the ALB occasionally returns a 502 status code (Bad Gateway) error.The root cause is malformed HTTP headers that are returned to the ALB.The webpage returns successfully when a solutions architect reloads the webpage immediately after the error occurs.While the company is working on the problem, the solutions architect needs to provide a custom error page instead of the standard ALB error page to visitors.Which combination of steps will meet this requirement with the LEAST amount of operational overhead? (Choose two.)Read More →

A company has application services that have been containerized and deployed on multiple Amazon EC2 instances with public IPs.An Apache Kafka cluster has been deployed to the EC2 instances.A PostgreSQL database has been migrated to Amazon RDS for PostgreSQL.The company expects a significant increase of orders on its platform when a new version of its flagship product is released.What changes to the current architecture will reduce operational overhead and support the product release?Read More →

A development team has created a new flight tracker application that provides near-real-time data to users.The application has a front end that consists of anApplication Load Balancer (ALB) in front of two large Amazon EC2 instances in a single Availability Zone.Data is stored in a single Amazon RDS MySQL DB instance.An Amazon Route 53 DNS record points to the ALB.Management wants the development team to improve the solution to achieve maximum reliability with the least amount of operational overhead.Which set of actions should the team take?Read More →

A company has an on-premises Microsoft SQL Server database that writes a nightly 200 GB export to a local drive.The company wants to move the backups to more robust cloud storage on Amazon S3.The company has set up a 10 Gbps AWS Direct Connect connection between the on-premises data center and AWS.Which solution meets these requirements MOST cost-effectively?Read More →

A company has a large number of AWS accounts in an organization in AWS Organizations.A different business group owns each account.All the AWS accounts are bound by legal compliance requirements that restrict all operations outside the eu-west-2 Region.The company’s security team has mandated the use of AWS Systems Manager Session Manager across all AWS accounts.Which solution should a solutions architect recommend to meet these requirements?Read More →

A startup company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI.The company’s engineers rely heavily on SSH access to the instances for troubleshooting.The company’s existing architecture includes the following:✑ A VPC with private and public subnets, and a NAT gateway✑ Site-to-Site VPN for connectivity with the on-premises environment✑ EC2 security groups with direct SSH access from the on-premises environmentThe company needs to increase security controls around SSH access and provide auditing of commands run by the engineers.Which strategy should a solutions architect use?Read More →

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC.An AWS Site-to-Site VPN connects the VPC to the company’s on-premises network.The new service must communicate with existing on-premises services.The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone.This DNS zone is wholly hosted on premises and is available only on the company’s private network.A solutions architect must ensure that the new service can resolve hostnames on the company example domain to integrate with existing services.Which solution meets these requirements?Read More →