SAP-C02 (Page 15)

A company is migrating its on-premises IoT platform to AWS.The platform consists of the following components:• A MongoDB cluster as a data store for all collected and processed IoT data.• An application that uses Message Queuing Telemetry Transport (MQTT) to connect to IoT devices every 5 minutes to collect data.• An application that runs jobs periodically to generate reports from the IoT data.The jobs take 120-600 seconds to finish running.• A web application that runs on a web server.End users use the web application to generate reports that are accessible to the general public.The company needs to migrate the platform to AWS to reduce operational overhead while maintaining performance.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A company has deployed applications to thousands of Amazon EC2 instances in an AWS account.A security audit discovers that several unencrypted Amazon Elastic Block Store (Amazon EBS) volumes are attached to the EC2 instances.The company’s security policy requires the EBS volumes to be encrypted.The company needs to implement an automated solution to encrypt the EBS volumes.The solution also must prevent development teams from creating unencrypted EBS volumes.Which solution will meet these requirements?Read More →

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →

A company is hosting an application on AWS for a project that will run for the next 3 years.The application consists of 20 Amazon EC2 On-Demand Instances that are registered in a target group for a Network Load Balancer (NLB).The instances are spread across two Availability Zones.The application is stateless and runs 24 hours a day, 7 days a week.The company receives reports from users who are experiencing slow responses from the application.Performance metrics show that the instances are at 10% CPU utilization during normal application use.However, the CPU utilization increases to 100% at busy times, which typically last for a few hours.The company needs a new architecture to resolve the problem of slow responses from the application.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has set up its entire infrastructure on AWS.The company uses Amazon EC2 instances to host its ecommerce website and uses Amazon S3 to store static data.Three engineers at the company handle the cloud administration and development through one AWS account.Occasionally, an engineer alters an EC2 security group configuration of another engineer and causes noncompliance issues in the environment.A solutions architect must set up a system that tracks changes that the engineers make.The system must send alerts when the engineers make noncompliant changes to the security settings for the EC2 instances.What is the FASTEST way for the solutions architect to meet these requirements?Read More →

A company is storing sensitive data in an Amazon S3 bucket.The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years.The company’s security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket.Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)Read More →

A company is planning to migrate several applications to AWS.The company does not have a good understanding of its entire application estate.The estate consists of a mixture of physical machines and VMs.One application that the company will migrate has many dependencies that are sensitive to latency.The company is unsure what all the dependencies are.However the company knows that the low-latency communications use a custom IP-based protocol that runs on port 1000.The company wants to migrate the application and these dependencies together to move all the low-latency interfaces to AWS at the same time.The company has installed the AWS Application Discovery Agent and has been collecting data for several months.What should the company do to identify the dependencies that need to be migrated in the same phase as the application?Read More →

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →

A company needs to migrate an on-premises SFTP site to AWS.The SFTP site currently runs on a Linux VM.Uploaded files are made available to downstream applications through an NFS share.As part of the migration to AWS, a solutions architect must implement high availability.The solution must provide external vendors with a set of static public IP addresses that the vendors can allow.The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using an organization in AWS Organizations to manage hundreds of AWS accounts.A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities.The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.Which combination of steps should the solutions architect take to provide the baseline protection? (Choose three.)Read More →