SAP-C02 (Page 12)

A company is designing its network configuration in the AWS Cloud.The company uses AWS Organizations to manage a multi-account setup.The company has three OUs.Each OU contains more than 100 AWS accounts.Each account has a single VPC, and all the VPCs in each OU are in the same AWS Region.The CIDR ranges for all the AWS accounts do not overlap.The company needs to implement a solution in which VPCs in the same OU can communicate with each other but cannot communicate with VPCs in other OUs.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has an application that analyzes and stores image data on premises.The application receives millions of new image files every day.Files are an average of 1 MB in size.The files are analyzed in batches of 1 GB.When the application analyzes a batch, the application zips the images together.The application then archives the images as a single file in an on-premises NFS server for long-term storage.The company has a Microsoft Hyper-V environment on premises and has compute capacity available.The company does not have storage capacity and wants to archive the images on AWS.The company needs the ability to retrieve archived data within 1 week of a request.The company has a 10 Gbps AWS Direct Connect connection between its on-premises data center and AWS.The company needs to set bandwidth limits and schedule archived images to be copied to AWS during non-business hours.Which solution will meet these requirements MOST cost-effectively?Read More →

A company needs to run large batch-processing jobs on data that is stored in an Amazon S3 bucket.The jobs perform simulations.The results of the jobs are not time sensitive, and the process can withstand interruptions.Each job must process 15-20 GB of data when the data is stored in the S3 bucket.The company will store the output from the jobs in a different Amazon S3 bucket for further analysis.Which solution will meet these requirements MOST cost-effectively?Read More →

A company runs a content management application on a single Windows Amazon EC2 instance in a development environment.The application reads and writes static content to a 2 TB Amazon Elastic Block Store (Amazon EBS) volume that is attached to the instance as the root device.The company plans to deploy this application in production as a highly available and fault-tolerant solution that runs on at least three EC2 instances across multiple Availability Zones.A solutions architect must design a solution that joins all the instances that run the application to an Active Directory domain.The solution also must implement Windows ACLs to control access to file contents.The application always must maintain exactly the same content on all running instances at any given point in time.Which solution will meet these requirements with the LEAST management overhead?Read More →

A retail company is mounting IoT sensors in all of its stores worldwide.During the manufacturing of each sensor, the company’s private certificate authority (CA) issues an X.509 certificate that contains a unique serial number.The company then deploys each certificate to its respective sensor.A solutions architect needs to give the sensors the ability to send data to AWS after they are installed.Sensors must not be able to send data to AWS until they are installed.Which solution will meet these requirements?Read More →

A company is using multiple AWS accounts and has multiple DevOps teams running production and non-production workloads in these accounts.The company would like to centrally-restrict access to some of the AWS services that the DevOps teams do not use.The company decided to use AWS Organizations and successfully invited all AWS accounts into the Organization.They would like to allow access to services that are currently in-use and deny a few specific services.Also they would like to administer multiple accounts together as a single unit.What combination of steps should the solutions architect take to satisfy these requirements? (Choose three.)Read More →

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS.The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC.The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →

A company is developing a new service that will be accessed using TCP on a static port.A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name my.service.com, which is publicly accessible.The service must use fixed address assignments so other companies can add the addresses to their allow lists.Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these requirements?Read More →

A company uses an on-premises data analytics platform.The system is highly available in a fully redundant configuration across 12 servers in the company’s data center.The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users.Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs.The scheduled jobs account for 65% of the system usage.User jobs typically finish running in less than 5 minutes and have no SLA.The user jobs account for 35% of system usage.During system failures, scheduled jobs must continue to meet SLAs.However, user jobs can be delayed.A solutions architect needs to move the system to Amazon EC2 instances and adopt a consumption-based model to reduce costs with no long-term commitments.The solution must maintain high availability and must not affect the SLAs.Which solution will meet these requirements MOST cost-effectively?Read More →