SAP-C02 (Page 15)

A company needs to create and manage multiple AWS accounts for a number of departments from a central location.The security team requires read-only access to all accounts from its own AWS account.The company is using AWS Organizations and created an account for the security team.How should a solutions architect meet these requirements?Read More →

A company manufactures smart vehicles.The company uses a custom application to collect vehicle data.The vehicles use the MQTT protocol to connect to the application.The company processes the data in 5-minute intervals.The company then copies vehicle telematics data to on-premises storage.Custom applications analyze this data to detect anomalies.The number of vehicles that send data grows constantly.Newer vehicles generate high volumes of data.The on-premises storage solution is not able to scale for peak traffic, which results in data loss.The company must modernize the solution and migrate the solution to AWS to resolve the scaling challenges.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is developing a gene reporting device that will collect genomic information to assist researchers with collecting large samples of data from a diverse population.The device will push 8 KB of genomic data every second to a data platform that will need to process and analyze the data and provide information back to researchers.The data platform must meet the following requirements:• Provide near-real-time analytics of the inbound genomic data• Ensure the data is flexible, parallel, and durable• Deliver results of processing to a data warehouseWhich strategy should a solutions architect use to meet these requirements?Read More →

A company is migrating its development and production workloads to a new organization in AWS Organizations.The company has created a separate member account for development and a separate member account for production.Consolidated billing is linked to the management account.In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts.Which solution will meet this requirement?Read More →

A company’s CISO has asked a solutions architect to re-engineer the company’s current CI/CD practices to make sure patch deployments to its application can happen as quickly as possible with minimal downtime if vulnerabilities are discovered.The company must also be able to quickly roll back a change in case of errors.The web application is deployed in a fleet of Amazon EC2 instances behind an Application Load Balancer.The company is currently using GitHub to host the application source code, and has configured an AWS CodeBuild project to build the application.The company also intends to use AWS CodePipeline to trigger builds from GitHub commits using the existing CodeBuild project.What CI/CD configuration meets all of the requirements?Read More →

A company is using AWS CloudFormation as its deployment tool for all applications.It stages all application binaries and templates within Amazon S3 buckets with versioning enabled.Developers have access to an Amazon EC2 instance that hosts the integrated development environment (IDE).The developers download the application binaries from Amazon S3 to the EC2 instance, make changes, and upload the binaries to an S3 bucket after running the unit tests locally.The developers want to improve the existing deployment mechanism and implement CI/CD using AWS CodePipeline.The developers have the following requirements:• Use AWS CodeCommit for source control.• Automate unit testing and security scanning.• Alert the developers when unit tests fail.• Turn application features on and off, and customize deployment dynamically as part of CI/CD.• Have the lead developer provide approval before deploying an application.Which solution will meet these requirements?Read More →

A global ecommerce company has many data centers around the world.With the growth of its stored data, the company needs to set up a solution to provide scalable storage for legacy on-premises file applications.The company must be able to take point-in-time copies of volumes by using AWS Backup and must retain low-latency access to frequently accessed data.The company also needs to have storage volumes that can be mounted as Internet Small Computer System Interface (iSCSI) devices from the company’s on-premises application servers.Which solution will meet these requirements?Read More →

A company has an application that uses AWS Key Management Service (AWS KMS) to encrypt and decrypt data.The application stores data in an Amazon S3 bucket in an AWS Region.Company security policies require the data to be encrypted before the data is placed into the S3 bucket.The application must decrypt the data when the application reads files from the S3 bucket.The company replicates the S3 bucket to other Regions.A solutions architect must design a solution so that the application can encrypt and decrypt data across Regions.The application must use the same key to decrypt the data in each Region.Which solution will meet these requirements?Read More →

A company needs to move some on-premises Oracle databases to AWS.The company has chosen to keep some of the databases on premises for business compliance reasons.The on-premises databases contain spatial data and run cron jobs for maintenance.The company needs to connect to the on-premises systems directly from AWS to query data as a foreign table.Which solution will meet these requirements?Read More →

A company hosts an application that uses several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). During the initial startup of the EC2 instances, the EC2 instances run user data scripts to download critical content for the application from an Amazon S3 bucket.The EC2 instances are launching correctly. However, after a period of time, the EC2 instances are terminated with the following error message: “An instance was taken out of service in response to an ELB system health check failure.” EC2 instances continue to launch and be terminated because of Auto Scaling events in an endless loop.The only recent change to the deployment is that the company added a large amount of critical content to the S3 bucket. The company does not want to alter the user data scripts in production.What should a solutions architect do so that the production environment can deploy successfully?Read More →