SAP-C02 (Page 17)

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A financial services company has an asset management product that thousands of customers use around the world.The customers provide feedback about the product through surveys.The company is building a new analytical solution that runs on Amazon EMR to analyze the data from these surveys.The following user personas need to access the analytical solution to perform different actions:• Administrator: Provisions the EMR cluster for the analytics team based on the team’s requirements• Data engineer: Runs ETL scripts to process, transform, and enrich the datasets• Data analyst: Runs SQL and Hive queries on the dataA solutions architect must ensure that all the user personas have least privilege access to only the resources that they need.The user personas must be able to launch only applications that are approved and authorized.The solution also must ensure tagging for all resources that the user personas create.Which solution will meet these requirements?Read More →

A company migrated to AWS and uses AWS Business Support.The company wants to monitor the cost-effectiveness of Amazon EC2 instances across AWS accounts.The EC2 instances have tags for department, business unit, and environment.Development EC2 instances have high cost but low utilization.The company needs to detect and stop any underutilized development EC2 instances.Instances are underutilized if they had 10% or less average daily CPU utilization and 5 MB or less network I/O for at least 4 of the past 14 days.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A travel company built a web application that uses Amazon Simple Email Service (Amazon SES) to send email notifications to users.The company needs to enable logging to help troubleshoot email delivery issues.The company also needs the ability to do searches that are based on recipient, subject, and time sent.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)Read More →

A company wants to run a custom network analysis software package to inspect traffic as traffic leaves and enters a VPC.The company has deployed the solution by using AWS CloudFormation on three Amazon EC2 instances in an Auto Scaling group.All network routing has been established to direct traffic to the EC2 instances.Whenever the analysis software stops working, the Auto Scaling group replaces an instance.The network routes are not updated when the instance replacement occurs.Which combination of steps will resolve this issue? (Choose three.)Read More →

A company has several AWS Lambda functions written in Python.The functions are deployed with the .zip package deployment type.The functions use a Lambda layer that contains common libraries and packages in a .zip file.The Lambda .zip packages and Lambda layer .zip file are stored in an Amazon S3 bucket.The company must implement automatic scanning of the Lambda functions and the Lambda layer to identify CVEs.A subset of the Lambda functions must receive automated code scans to detect potential data leaks and other vulnerabilities.The code scans must occur only for selected Lambda functions, not all the Lambda functions.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company is migrating its data center to the AWS Cloud and needs to complete the migration as quickly as possible.The company has many applications that are running on hundreds of VMware VMs in the data center.Each VM is configured with a shared Windows folder that contains common shared files.The file share is larger than 100 GB in size.The company’s compliance team requires a change request to be fled and approved for every software installation and modification to each VM.The company has an AWS Direct Connect connection with 10 GB of bandwidth between AWS and the data center.Which set of steps should the company take to complete the migration in the LEAST amount of time?Read More →

A media company has a 30-T8 repository of digital news videos.These videos are stored on tape in an on-premises tape library and referenced by a Media Asset Management (MAM) system.The company wants to enrich the metadata for these videos in an automated fashion and put them into a searchable catalog by using a MAM feature.The company must be able to search based on information in the video, such as objects, scenery items, or people’s faces.A catalog is available that contains faces of people who have appeared in the videos that include an image of each person.The company would like to migrate these videos to AWS.The company has a high-speed AWS Direct Connect connection with AWS and would like to move the MAM solution video content directly from its current file system.How can these requirements be met by using the LEAST amount of ongoing management overhead and causing MINIMAL disruption to the existing system?Read More →

A company runs an ecommerce web application on AWS. The web application is hosted as a static website on Amazon S3 with Amazon CloudFront for content delivery. An Amazon APIGateway API invokes AWS Lambda functions to handle user requests and order processing for the web application The Lambda functions store data in an Amazon ROS for MySQL DB cluster that uses On-Demand instances. The DB cluster usage has been consistent in the past 12 months.Recently, the website has experienced SQL injection and web exploit attempts. Customers also report that order processing time has increased during periods of peak usage. During these periods, the Lambda functions often have cold starts. As the company grows, the company needs to ensure scalability and low-latency access during traffic peaks. The company also must optimize the database costs and add protection against the SQL injection and web exploit attempts.Which solution will meet these requirements?Read More →

A company has an application that stores user-uploaded videos in an Amazon S3 bucket that uses S3 Standard storage.Users access the videos frequently in the first 180 days after the videos are uploaded.Access after 180 days is rare.Named users and anonymous users access the videos.Most of the videos are more than 100 MB in size.Users often have poor internet connectivity when they upload videos, resulting in failed uploads.The company uses multipart uploads for the videos.A solutions architect needs to optimize the S3 costs of the application.Which combination of actions will meet these requirements? (Choose two.)Read More →