SAP-C01 (Page 71)

A company wants to manage the costs associated with a group of 20 applications that are infrequently used, but are still business-critical, by migrating to AWS.The applications are a mix of Java and Node.js spread across different instance clusters.The company wants to minimize costs while standardizing by using a single deployment methodology.Most of the applications are part of month-end processing routines with a small number of concurrent users, but they are occasionally run at other times.Average application memory consumption is less than 1 GB, though some applications use as much as 2.5 GB of memory during peak processing.The most important application in the group is a billing report written in Java that accesses multiple data sources and often for several hours.Which is the MOST cost-effective solution?Read More →

A company has been using a third-party provider for its content delivery network and recently decided to switch to Amazon CloudFront.The development team wants to maximize performance for the global user base.The company uses a content management system (CMS) that serves both static and dynamic content.The CMS is behind an Application Load Balancer (ALB) which is set as the default origin for the distribution.Static assets are served from an Amazon S3 bucket.The Origin Access Identity (OAI) was created properly and the S3 bucket policy has been updated to allow the GetObject action from the OAI, but static assets are receiving a 404 error.Which combination of steps should the solutions architect take to fix the error? (Choose two.)Read More →

A company has an application that generates reports and stores them in an Amazon bucket Amazon S3 bucket.When a user accesses their report, the application generates a signed URL to allow the user to download the report.The company’s security team has discovered that the files are public and that anyone can download them without authentication.The company has suspended the generation of new reports until the problem is resolved.Which set of action will immediately remediate the security issue without impacting the application’s normal workflow?Read More →

A hybrid network architecture must be used during a company’s multi-year data center migration from multiple private data centers to AWS.The current data centers are linked together with private fiber.Due to unique legacy applications, NAT cannot be used.During the migration period, many applications will need access to other applications in both the data centers and AWS.Which option offers a hybrid network architecture that is secure and highly available, that allows for high bandwidth and a multi-region deployment post-migration?Read More →

A company’s lease of a colocated storage facility will expire in 90 days.The company wants to move to AWS to avoid signing a contract extension.The company’s environment consists of 200 virtual machines and a NAS with 40 TB of data.Most of the data is archival, yet instant access is required when data is requested.Leadership wants to ensure minimal downtime during the migration.Each virtual machine has a number of customized configurations.The company’s existing 1Gbps network connection is mostly idle, especially after business hours.Which combination of steps should the company take to migrate to AWS while minimizing downtime and operational impact? (Choose two.)Read More →

A company has an application that runs on Amazon EC2 instances in an Amazon EC2 Auto Scaling group.The company uses AWS CodePipeline to deploy the application.The instances that run in the Auto Scaling group are constantly changing because of scaling events.When the company deploys new application code versions, the company installs the AWS CodeDeploy agent on any new target EC2 instances and associates the instances with the CodeDeploy deployment group.The application is set to go live within the next 24 hours.What should a solutions architect recommend to automate the application deployment process with the LEAST amount of operational overhead?Read More →

A company is running a containerized application in the AWS Cloud.The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group.The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images.When a new image version is uploaded, the new image version receives a unique tag.The company needs a solution that inspects new image versions for common vulnerabilities and exposures.The solution must automatically delete new image tags that have Critical or High severity findings.The solution also must notify the development team when such a deletion occurs.Which solution meets these requirements?Read More →

A company has multiple AWS accounts as part of an organization created with AWS Organizations.Each account has a VPC in the us-east-2 Region and is used for either production or development workloads.Amazon EC2 instances across production accounts need to communicate with each other, and EC2 instances across development accounts need to communicate with each other, but production and development instances should not be able to communicate with each other.To facilitate connectivity, the company created a common network account.The company used AWS Transit Gateway to create a transit gateway in the us-east-2Region in the network account and shared the transit gateway with the entire organization by using AWS Resource Access Manager.Network administrators then attached VPCs in each account to the transit gateway, after which the EC2 instances were able to communicate across accounts.However, production and development accounts were also able to communicate with one another.Which set of steps should a solutions architect take to ensure production traffic and development traffic are completely isolated?Read More →

A solutions architect must implement a multi-Region architecture for an Amazon RDS for PostgreSQL database that supports a web application.The database launches from an AWS CloudFormation template that includes AWS services and features that are present in both the primary and secondary Regions.The database is configured for automated backups, and it has an RTO of 15 minutes and an RPO of 2 hours.The web application is configured to use an AmazonRoute 53 record to route traffic to the database.Which combination of steps will result in a highly available architecture that meets all the requirements? (Choose two.)Read More →

A Solutions Architect is building a containerized .NET Core application that will run in AWS Fargate.The backend of the application requires Microsoft SQL Server with high availability.All tiers of the application must be highly available.The credentials used for the connection string to SQL Server should not be stored on disk within the .NET Core front-end containers.Which strategies should the Solutions Architect use to meet these requirements?Read More →