SAP-C02 (Page 23)

A company uses an organization in AWS Organizations to manage the company’s AWS accounts.The company uses AWS CloudFormation to deploy all infrastructure.A finance team wants to build a chargeback model.The finance team asked each business unit to tag resources by using a predefined list of project values.When the finance team used the AWS Cost and Usage Report in AWS Cost Explorer and filtered based on project, the team noticed noncompliant project values.The company wants to enforce the use of project tags for new resources.Which solution will meet these requirements with the LEAST effort?Read More →

A solutions architect must update an application environment within AWS Elastic Beanstalk using a blue/green deployment methodology.The solutions architect creates an environment that is identical to the existing application environment and deploys the application to the new environment.What should be done next to complete the update?Read More →

A company runs a customer service center that accepts calls and automatically sends all customers a managed, interactive, two-way experience survey by text message.The applications that support the customer service center run on machines that the company hosts in an on-premises data center.The hardware that the company uses is old, and the company is experiencing downtime with the system.The company wants to migrate the system to AWS to improve reliability.Which solution will meet these requirements with the LEAST ongoing operational overhead?Read More →

An AWS partner company is building a service in AWS Organizations using its organization named org1.This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2.The company must establish least privilege security access using an API or command line tool to the customer account.What is the MOST secure way to allow org1 to access resources in org2?Read More →

A delivery company needs to migrate its third-party route planning application to AWS.The third party supplies a supported Docker image from a public registry.The image can run in as many containers as required to generate the route map.The company has divided the delivery area into sections with supply hubs so that delivery drivers travel the shortest distance possible from the hubs to the customers.To reduce the time necessary to generate route maps, each section uses its own set of Docker containers with a custom configuration that processes orders only in the section’s area.The company needs the ability to allocate resources cost-effectively based on the number of running containers.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A software company hosts an application on AWS with resources in multiple AWS accounts and Regions.The application runs on a group of Amazon EC2 instances in an application VPC located in the us-east-1 Region with an IPv4 CIDR block of 10.10.0.0/16.In a different AWS account, a shared services VPC is located in the us-east-2 Region with an IPv4 CIDR block of 10.10.10.0/24.When a cloud engineer uses AWS CloudFormation to attempt to peer the application VPC with the shared services VPC, an error message indicates a peering failure.Which factors could cause this error? (Choose two.)Read More →

An external audit of a company’s serverless application reveals IAM policies that grant too many permissions.These policies are attached to the company’s AWS Lambda execution roles.Hundreds of the company’s Lambda functions have broad access permissions such as full access to Amazon S3 buckets and Amazon DynamoDB tables.The company wants each function to have only the minimum permissions that the function needs to complete its task.A solutions architect must determine which permissions each Lambda function needs.What should the solutions architect do to meet this requirement with the LEAST amount of effort?Read More →

A solutions architect must analyze a company’s Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to determine whether the company is using resources efficiently.The company is running several large, high-memory EC2 instances to host database clusters that are deployed in active/passive configurations.The utilization of these EC2 instances varies by the applications that use the databases, and the company has not identified a pattern.The solutions architect must analyze the environment and take action based on the findings.Which solution meets these requirements MOST cost-effectively?Read More →

A life sciences company is using a combination of open source tools to manage data analysis workflows and Docker containers running on servers in its on-premises data center to process genomics data.Sequencing data is generated and stored on a local storage area network (SAN), and then the data is processed.The research and development teams are running into capacity issues and have decided to re-architect their genomics analysis platform on AWS to scale based on workload demands and reduce the turnaround time from weeks to days.The company has a high-speed AWS Direct Connect connection.Sequencers will generate around 200 GB of data for each genome, and individual jobs can take several hours to process the data with ideal compute capacity.The end result will be stored in Amazon S3.The company is expecting 10-15 job requests each day.Which solution meets these requirements?Read More →

A company has deployed an application on AWS Elastic Beanstalk.The application uses Amazon Aurora for the database layer.An Amazon CloudFront distribution serves web requests and includes the Elastic Beanstalk domain name as the origin server.The distribution is configured with an alternate domain name that visitors use when they access the application.Each week, the company takes the application out of service for routine maintenance.During the time that the application is unavailable, the company wants visitors to receive an informational message instead of a CloudFront error message.A solutions architect creates an Amazon S3 bucket as the first step in the process.Which combination of steps should the solutions architect take next to meet the requirements? (Choose three.)Read More →