SAP-C02

A company operates a static content distribution platform that serves customers globally.The customers consume content from their own AWS accounts.The company serves its content from an Amazon S3 bucket.The company uploads the content from its on-premises environment to the S3 bucket by using an S3 File Gateway.The company wants to improve the platform’s performance and reliability by serving content from the AWS Region that is geographically closest to customers.The company must route the on-premises data to Amazon S3 with minimal latency and without public internet exposure.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)Read More →

A company requires that all internal application connectivity use private IP addresses.To facilitate this policy, a solutions architect has created interface endpoints to connect to AWS Public services.Upon testing, the solutions architect notices that the service names are resolving to public IP addresses, and that internal services cannot connect to the interface endpoints.Which step should the solutions architect take to resolve this issue?Read More →

A company is running a three-tier web application in an on-premises data center.The frontend is served by an Apache web server, the middle tier is a monolithic Java application, and the storage tier is a PostgreSQL database.During a recent marketing promotion, customers could not place orders through the application because the application crashed.An analysis showed that all three tiers were overloaded.The application became unresponsive, and the database reached its capacity limit because of read operations.The company already has several similar promotions scheduled in the near future.A solutions architect must develop a plan for migration to AWS to resolve these issues.The solution must maximize scalability and must minimize operational effortWhich combination of steps will meet these requirements? (Choose three.)Read More →

A company is running a serverless application that consists of several AWS Lambda functions and Amazon DynamoDB tables.The company has created new functionality that requires the Lambda functions to access an Amazon Neptune DB cluster.The Neptune DB cluster is located in three subnets in a VPC.Which of the possible solutions will allow the Lambda functions to access the Neptune DB cluster and DynamoDB tables? (Choose two.)Read More →

A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.Which solution will meet these requirements?Read More →

A research center is migrating to the AWS Cloud and has moved its on-premises 1 PB object storage to an Amazon S3 bucket.One hundred scientists are using this object storage to store their work-related documents.Each scientist has a personal folder on the object store.All the scientists are members of a single IAM user group.The research center’s compliance officer is worried that scientists will be able to access each other’s work.The research center has a strict obligation to report on which scientist accesses which documents.The team that is responsible for these reports has little AWS experience and wants a ready-to-use solution that minimizes operational overhead.Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)Read More →

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services.The company’s CIO has asked a solutions architect to design a simple, highly available, and loosely coupled order processing application.The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table.The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays.Which of the following is the MOST reliable approach to meet the requirements?Read More →

A company wants to record key performance indicators (KPIs) from its application as part of a strategy to convert to a user-based licensing schema.The application is a multi-tier application with a web-based UI.The company saves all log files to Amazon CloudWatch by using the CloudWatch agent.All logins to the application are saved in a log file.As part of the new license schema, the company needs to find out how many unique users each client has on a daily basis, weekly basis, and monthly basis.Which solution will provide this information with the LEAST change to the application?Read More →

A company stores and manages documents in an Amazon Elastic File System (Amazon EFS) file system.The file system is encrypted with an AWS Key Management Service (AWS KMS) key.The file system is mounted to an Amazon EC2 instance that runs proprietary software.The company has enabled automatic backups for the file system.The automatic backups use the AWS Backup default backup plan.A solutions architect must ensure that deleted documents can be recovered within an RPO of 100 minutes.Which solution will meet these requirements?Read More →

A company has implemented a new security requirement.According to the new requirement, the company must scan all traffic from corporate AWS instances in the company’s VPC for violations of the company’s security policies.As a result of these scans, the company can block access to and from specific IP addresses.To meet the new requirement, the company deploys a set of Amazon EC2 instances in private subnets to serve as transparent proxies.The company installs approved proxy server software on these EC2 instances.The company modifies the route tables on all subnets to use the corresponding EC2 instances with proxy software as the default route.The company also creates security groups that are compliant with the security policies and assigns these security groups to the EC2 instances.Despite these configurations, the traffic of the EC2 instances in their private subnets is not being properly forwarded to the internet.What should a solutions architect do to resolve this issue?Read More →