SAP-C01 (Page 7)

A user has created a VPC with two subnets: one public and one private.The user is planning to run the patch update for the instances in the private subnet.How can the instances in the private subnet connect to the internet?Read More →

A user has created a VPC with public and private subnets using the VPC Wizard.The VPC has CIDR 20.0.0.0/16.The private subnet uses CIDR 20.0.0.0/24.Which of the below mentioned entries are required in the main route table to allow the instances in VPC to communicate with each other?Read More →

You want to establish redundant VPN connections and customer gateways on your network by setting up a second VPN connection.Which of the following will ensure that this functions correctly?Read More →

Which of the following is NOT true of the DynamoDB Console?Read More →

In DynamoDB, which of the following allows you to set alarms when you reach a specified threshold for a metric?Read More →

In regard to DynamoDB, when you create a table with a hash-and-range key.Read More →

A company has developed a web application.The company is hosting the application on a group of Amazon EC2 instances behind an Application Load Balancer.The company wants to improve the security posture of the application and plans to use AWS WAF web ACLs.The solution must not adversely affect legitimate traffic to the application.How should a solutions architect configure the web ACLs to meet these requirements?Read More →

A company’s security compliance requirements state that all Amazon EC2 images must be scanned for vulnerabilities and must pass a CVE assessment.A solutions architect is developing a mechanism to create security- approved AMIs that can be used by developers.Any new AMIs should go through an automated assessment process and be marked as approved before developers can use them.The approved images must be scanned every 30 days to ensure compliance.Which combination of steps should the solutions architect take to meet these requirements while following best practices? (Choose two.)Read More →

A finance company hosts a data lake in Amazon S3.The company receives financial data records over SFTP each night from several third parties.The company runs its own SFTP server on an Amazon EC2 instance in a public subnet of a VPC.After the files are uploaded, they are moved to the data lake by a cron job that runs on the same instance.The SFTP server is reachable on DNS sftp.example.com through the use of Amazon Route 53.What should a solutions architect do to improve the reliability and scalability of the SFTP solution?Read More →

A solutions architect is designing the data storage and retrieval architecture for a new application that a company will be launching soon.The application is designed to ingest millions of small records per minute from devices all around the world.Each record is less than 4 KB in size and needs to be stored in a durable location where it can be retrieved with low latency.The data is ephemeral and the company is required to store the data for 120 days only, after which the data can be deleted.The solutions architect calculates that, during the course of a year, the storage requirements would be about 10-15 TB.Which storage strategy is the MOST cost-effective and meets the design requirements?Read More →