SAP-C01 (Page 60)

A company is migrating its on-premises build artifact server to an AWS solution.The current system consists of an Apache HTTP server that serves artifacts to clients on the local network, restricted by the perimeter firewall.The artifact consumers are largely build automation scripts that download artifacts via anonymousHTTP, which the company will be unable to modify within its migration timetable.The company decides to move the solution to Amazon S3 static website hosting.The artifact consumers will be migrated to Amazon EC2 instances located within both public and private subnets in a virtual private cloud (VPC).Which solution will permit the artifact consumers to download artifacts without modifying the existing automation scripts?Read More →

A company prefers to limit running Amazon EC2 instances to those that were launched from AMIs pre-approved by the Information Security department.TheDevelopment team has an agile continuous integration and deployment process that cannot be stalled by the solution.Which method enforces the required controls with the LEAST impact on the development process? (Choose two.)Read More →

A company operates a group of imaging satellites.The satellites stream data to one of the company’s ground stations where processing creates about 5 GB of images per minute.This data is added to network-attached storage, where 2 PB of data are already stored.The company runs a website that allows its customers to access and purchase the images over the Internet.This website is also running in the ground station.Usage analysis shows that customers are most likely to access images that have been captured in the last 24 hours.The company would like to migrate the image storage and distribution system to AWS to reduce costs and increase the number of customers that can be served.Which AWS architecture and migration strategy will meet these requirements?Read More →

A company has a media metadata extraction pipeline running on AWS.Notifications containing a reference to a file in Amazon S3 are sent to an Amazon SimpleNotification Service (Amazon SNS) topic.The pipeline consists of a number of AWS Lambda functions that are subscribed to the SNS topic.The Lambda functions extract the S3 tile and write metadata to an Amazon RDS PostgreSQL DB instance.Users report that updates to the metadata are sometimes slow to appear or are lost.During these times, the CPU utilization on the database is high and the number of failed Lambda invocations increases.Which combination of actions should a solutions architect take to help resolve this issue? (Choose two.)Read More →

A company is currently running a production workload on AWS that is very I/O intensive.Its workload consists of a single tier with 10 c4.8xlarge instances, each with 2 TB gp2 volumes.The number of processing jobs has recently increased, and latency has increased as well.The team realizes that they are constrained on the IOPS.For the application to perform efficiently, they need to increase the IOPS by 3,000 for each of the instances.Which of the following designs will meet the performance goal MOST cost effectively?Read More →

A company is migrating its three-tier web application from on-premises to the AWS Cloud.The company has the following requirements for the migration process:✑ Ingest machine images from the on-premises environment.✑ Synchronize changes from the on-premises environment to the AWS environment until the production cutover.✑ Minimize downtime when executing the production cutover.✑ Migrate the virtual machines’ root volumes and data volumes.Which solution will satisfy these requirements with minimal operational overhead?Read More →

A company asks a solution architect to optimize the cost of a solution.The solution handles requests from multiple customers.The solution includes a multi-tier architecture that uses Amazon API Gateway, AWS Lambda, AWS Fargate, Amazon Simple Queue Service (Amazon SQS), and Amazon EC2.In the current setup, requests go through API Gateway to Lambda and either start a container in Fargate or push a message to an SQS queue.An EC2 Fleet provides EC2 instances that serve as workers for the SQS queue.The EC2 Fleet scales based on the number of items in the SQS queue.Which combination of steps should the solutions architect recommend to reduce cost the MOST? (Choose three.)Read More →

An ecommerce website running on AWS uses an Amazon RDS for MySQL DB instance with General Purpose SSD storage.The developers chose an appropriate instance type based on demand, and configured 100 GB of storage with a sufficient amount of free space.The website was running smoothly for a few weeks until a marketing campaign launched.On the second day of the campaign, users reported long wait times and time outs.Amazon CloudWatch metrics indicated that both reads and writes to the DB instance were experiencing long response times.The CloudWatch metrics show 40% to 50% CPU and memory utilization, and sufficient free storage space is still available.The application server logs show no evidence of database connectivity issues.What could be the root cause of the issue with the marketing campaign?Read More →

A company is currently in the design phase of an application that will need an RPO of less than 5 minutes and an RTO of less than 10 minutes.The solutions architecture team is forecasting that the database will store approximately 10 TB of data.As part of the design, they are looking for a database solution that will provide the company with the ability to fail over to a secondary Region.Which solution will meet these business requirements at the LOWEST cost?Read More →

A company wants to provide desktop as a service (DaaS) to a number of employees using Amazon WorkSpaces.WorkSpaces will need to access files and services hosted on premises with authorization based on the company’s Active Directory.Network connectivity will be provided through an existing AWS DirectConnect connection.The solution has the following requirements:✑ Credentials from Active Directory should be used to access on-premises files and services.✑ Credentials from Active Directory should not be stored outside the company.✑ End users should have single sign-on (SSO) to on-premises files and services once connected to WorkSpaces.Which strategy should the solutions architect use for end user authentication?Read More →