SAP-C02 (Page 22)

A solutions architect is auditing the security setup or an AWS Lambda function for a company.The Lambda function retrieves, the latest changes from an Amazon Aurora database.The Lambda function and the database run in the same VPC.Lambda environment variables are providing the database credentials to the Lambda function.The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS).The data must not travel across the Internet.If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.What should the solutions architect recommend to meet these requirements?Read More →

A large mobile gaming company has successfully migrated all of its on-premises infrastructure to the AWS Cloud.A solutions architect is reviewing the environment to ensure that it was built according to the design and that it is running in alignment with the Well-Architected Framework.While reviewing previous monthly costs in Cost Explorer, the solutions architect notices that the creation and subsequent termination of several large instance types account for a high proportion of the costs.The solutions architect finds out that the company’s developers are launching new Amazon EC2 instances as part of their testing and that the developers are not using the appropriate instance types.The solutions architect must implement a control mechanism to limit the instance types that only the developers can launch.Which solution will meet these requirements?Read More →

A company is developing and hosting several projects in the AWS Cloud.The projects are developed across multiple AWS accounts under the same organization in AWS Organizations.The company requires the cost for cloud infrastructure to be allocated to the owning project.The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.Which actions should a solutions architect lake to resolve the problem and prevent it from happening in the future? (Choose three.)Read More →

A company has an on-premises monitoring solution using a PostgreSQL database for persistence of events.The database is unable to scale due to heavy ingestion and it frequently runs out of storage.The company wants to create a hybrid solution and has already set up a VPN connection between its network and AWS.The solution should include the following attributes:• Managed AWS services to minimize operational complexity.• A buffer that automatically scales to match the throughput of data and requires no ongoing administration.• A visualization tool to create dashboards to observe events in near-real time.• Support for semi-structured JSON data and dynamic schemas.Which combination of components will enable the company to create a monitoring solution that will satisfy these requirements? (Choose two.)Read More →

A company is running an application in the AWS Cloud.The application runs on containers m an Amazon Elastic Container Service (Amazon ECS) cluster.The ECS tasks use the Fargate launch type.The application’s data is relational and is stored in Amazon Aurora MySQL.To meet regulatory requirements, the application must be able to recover to a separate AWS Region in the event of an application failure.In case of a failure, no data can be lost.Which solution will meet these requirements with the LEAST amount of operational overhead?Read More →

A digital marketing company has multiple AWS accounts that belong to various teams.The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company’s marketing campaigns.The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects.A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account.The solutions architect also has set up a custom AWS Key Management Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket.However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Access Denied error.The solutions architect must ensure that users in the Strategy account can access the S3 bucket.The solution must provide these users with only the minimum permissions that they need.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company manages multiple AWS accounts by using AWS Organizations.Under the root OU, the company has two OUs: Research and DataOps.Because of regulatory requirements, all resources that the company deploys in the organization must reside in the ap-northeast-1 Region.Additionally, EC2 instances that the company deploys in the DataOps OU must use a predefined list of instance types.A solutions architect must implement a solution that applies these restrictions.The solution must maximize operational efficiency and must minimize ongoing maintenance.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company has an on-premises Microsoft SQL Server database that writes a nightly 200 GB export to a local drive.The company wants to move the backups to more robust cloud storage on Amazon S3.The company has set up a 10 Gbps AWS Direct Connect connection between the on-premises data center and AWS.Which solution meets these requirements MOST cost-effectively?Read More →

A company has IoT sensors that monitor traffic patterns throughout a large city.The company wants to read and collect data from the sensors and perform aggregations on the data.A solutions architect designs a solution in which the IoT devices are streaming to Amazon Kinesis Data Streams.Several applications are reading from the stream.However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.Which actions should the solutions architect take to resolve this issue? (Choose three.)Read More →

A company that provisions job boards for a seasonal workforce is seeing an increase in traffic and usage.The backend services run on a pair of Amazon EC2 instances behind an Application Load Balancer with Amazon DynamoDB as the datastore.Application read and write traffic is slow during peak seasons.Which option provides a scalable application architecture to handle peak seasons with the LEAST development effort?Read More →