SAP-C01 (Page 7)

A web application is hosted in a dedicated VPC that is connected to a company’s on-premises data center over a Site-to-Site VPN connection.The application is accessible from the company network only.This is a temporary non-production application that is used during business hours.The workload is generally low with occasional surges.The application has an Amazon Aurora MySQL provisioned database cluster on the backend.The VPC has an internet gateway and a NAT gateways attached.The web servers are in private subnets in an Auto Scaling group behind an Elastic Load Balancer.The web servers also upload data to an Amazon S3 bucket through the internet.A solutions architect needs to reduce operational costs and simplify the architecture.Which strategy should the solutions architect use?Read More →

A mobile app has become very popular, and usage has gone from a few hundred to millions of users.Users capture and upload images of activities within a city, and provide ratings and recommendations.Data access patterns are unpredictable.The current application is hosted on Amazon EC2 instances behind anApplication Load Balancer (ALB).The application is experiencing slowdowns and costs are growing rapidly.Which changes should a solutions architect make to the application architecture to control costs and improve performance?Read More →

A solutions architect is designing a publicly accessible web application that is on an Amazon CloudFront distribution with an Amazon S3 website endpoint as the origin.When the solution is deployed, the website returns an Error 403: Access Denied message.Which steps should the solutions architect take to correct the issue? (Choose two.)Read More →

A weather service provides high-resolution weather maps from a web application hosted on AWS in the eu-west-1 Region.The weather maps are updated frequently and stored in Amazon S3 along with static HTML content.The web application is fronted by Amazon CloudFront.The company recently expanded to serve users in the us-east-1 Region, and these new users report that viewing their respective weather maps is slow from time to time.Which combination of steps will resolve the us-east-1 performance issues? (Choose two.)Read More →

A company is running an application on Amazon EC2 instances in three environments: development, testing, and production.The company uses AMIs to deploy the EC2 instances.The company builds the AMIs by using custom deployment scripts and infrastructure orchestration tools for each release in each environment.The company is receiving errors in its deployment process.Errors appear during operating system package downloads and during application code installation from a third-party Git hosting service.The company needs deployments to become more reliable across all environments.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has an organization in AWS Organizations.The organization consists of a large number of AWS accounts that belong to separate business units.The company requires all Amazon EC2 instances to be provisioned with custom, hardened AMIs.The company wants a solution that provides each AWS account access to the AMIs.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company has an environment that has a single AWS account.A solutions architect is reviewing the environment to recommend what the company could improve specifically in terms of access to the AWS Management Console.The company’s IT support workers currently access the console for administrative tasks, authenticating with named IAM users that have been mapped to their job role.The IT support workers no longer want to maintain both their Active Directory and IAM user accounts.They want to be able to access the console by using their existing Active Directory credentials.The solutions architect is using AWS Single Sign-On (AWS SSO) to implement this functionality.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is running a high-user-volume media-sharing application on premises.It currently hosts about 400 TB of data with millions of video files.The company is migrating this application to AWS to improve reliability and reduce costs.The Solutions Architecture team plans to store the videos in an Amazon S3 bucket and use Amazon CloudFront to distribute videos to users.The company needs to migrate this application to AWS within 10 days with the least amount of downtime possible.The company currently has 1 Gbps connectivity to the Internet with30 percent free capacity.Which of the following solutions would enable the company to migrate the workload to AWS and meet all of the requirements?Read More →

A Solutions Architect must create a cost-effective backup solution for a company’s 500MB source code repository of proprietary and sensitive applications. The repository runs on Linux and backs up daily to tape. Tape backups are stored for 1 year.The current solution is not meeting the company’s needs because it is a manual process that is prone to error, expensive to maintain, and does not meet the need for a Recovery Point Objective (RPO) of 1 hour or Recovery Time Objective (RTO) of 2 hours. The new disaster recovery requirement is for backups to be stored offsite and to be able to restore a single file if needed.Which solution meets the customer’s needs for RTO, RPO, and disaster recovery with the LEAST effort and expense?Read More →

A company has created an account for individual Development teams, resulting in a total of 200 accounts.All accounts have a single virtual private cloud (VPC) in a single region with multiple microservices running in Docker containers that need to communicate with microservices in other accounts.The Security team requirements state that these microservices must not traverse the public internet, and only certain internal services should be allowed to call other individual services.If there is any denied network traffic for a service, the Security team must be notified of any denied requests, including the source IP.How can connectivity be established between service while meeting the security requirements?Read More →