SAP-C01 (Page 68)

A company built an ecommerce website on AWS using a three-tier web architecture.The application is Java-based and composed of an Amazon CloudFront distribution, an Apache web server layer of Amazon EC2 instances in an Auto Scaling group, and a backend Amazon Aurora MySQL database.Last month, during a promotional sales event, users reported errors and timeouts while adding items to their shopping carts.The operations team recovered the logs created by the web servers and reviewed Aurora DB cluster performance metrics.Some of the web servers were terminated before logs could be collected and the Aurora metrics were not sufficient for query performance analysis.Which combination of steps must the solutions architect take to improve application performance visibility during peak traffic events? (Choose three.)Read More →

A company runs a serverless application in a single AWS Region.The application accesses external URLs and extracts metadata from those sites.The company uses an Amazon Simple Notification Service (Amazon SNS) topic to publish URLs to an Amazon Simple Queue Service (Amazon SQS) queue.An AWS Lambda function uses the queue as an event source and processes the URLs from the queue.Results are saved to an Amazon S3 bucket.The company wants to process each URL in other Regions to compare possible differences in site localization.URLs must be published from the existing Region.Results must be written to the existing S3 bucket in the current Region.Which combination of changes will produce multi-Region deployment that meets these requirements? (Choose two.)Read More →

A company is building an image service on the web that will allow users to upload and search random photos.At peak usage, up to 10,000 users worldwide will upload their images.The service will then overlay text on the uploaded images, which will then be published on the company website.Which design should a solutions architect implement?Read More →

A company has a policy that all Amazon EC2 instances that are running a database must exist within the same subnets in a shared VPC.Administrators must follow security compliance requirements and are not allowed to directly log in to the shared account.All company accounts are members of the same organization in AWS Organizations.The number of accounts will rapidly increase as the company grows.A solutions architect uses AWS Resource Access Manager to create a resource share in the shared account.What is the MOST operationally efficient configuration to meet these requirements?Read More →

A large company is migrating its on-premises applications to the AWS Cloud.All the company’s AWS accounts belong to an organization in AWS Organizations.Each application is deployed into its own VPC in separate AWS accounts.The company decides to start the migration process by migrating the front-end web services while keeping the databases on premises.The databases are configured with local domain names that are specific to the on-premises environment.The local domain names must be resolvable from the migrated web services.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company runs applications on Amazon EC2 instances.The company plans to begin using an Auto Scaling group for the instances.As part of this transition, a solutions architect must ensure that Amazon CloudWatch Logs automatically collects logs from all new instances.The new Auto Scaling group will use a launch template that includes the Amazon Linux 2 AMI and no key pair.Which solution meets these requirements?Read More →

A software company is using three AWS accounts for each of its 10 development teams.The company has developed an AWS CloudFormation standard VPC template that includes three NAT gateways.The template is added to each account for each team.The company is concerned that network costs will increase each time a new development team is added.A solutions architect must maintain the reliability of the company’s solutions and minimize operational complexity.What should the solutions architect do to reduce the network costs while meeting these requirements?Read More →

A company uses a load balancer to distribute traffic to Amazon EC2 instances in a single Availability Zone.The company is concerned about security and wants a solutions architect to re-architect the solution to meet the following requirements:✑ Inbound requests must be filtered for common vulnerability attacks.✑ Rejected requests must be sent to a third-party auditing application.✑ All resources should be highly available.Which solution meets these requirements?Read More →

A company needs to implement a patching process for its servers.The on-premises servers and Amazon EC2 instances use a variety of tools to perform patching.Management requires a single report showing the patch status of all the servers and instances.Which set of actions should a solutions architect take to meet these requirements?Read More →

A solutions architect is implementing federated access to AWS for users of the company’s mobile application.Due to regulatory and security requirements, the application must use a custom-built solution for authenticating users and must use IAM roles for authorization.Which of the following actions would enable authentication and authorization and satisfy the requirements? (Choose two.)Read More →