SAP-C02 (Page 25)

A team collects and routes behavioral data for an entire company.The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway.Each public subnet also contains a NAT gateway.Most of the company’s applications read from and write to Amazon Kinesis Data Streams.Most of the workloads run in private subnets.A solutions architect must review the infrastructure.The solution architect needs to reduce costs and maintain the function of the applications.The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high.A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category.What should the solutions architect do to meet these requirements?Read More →

A retail company has an on-premises data center in Europe.The company also has a multi-Region AWS presence that includes the eu-west-1 and us-east-1 Regions.The company wants to be able to route network traffic from its on-premises infrastructure into VPCs in either of those Regions.The company also needs to support traffic that is routed directly between VPCs in those Regions.No single points of failure can exist on the network.The company already has created two 1 Gbps AWS Direct Connect connections from its on-premises data center.Each connection goes into a separate Direct Connect location in Europe for high availability.These two locations are named DX-A and DX-B, respectively.Each Region has a single AWS Transit Gateway that is configured to route all inter-VPC traffic within that Region.Which solution will meet these requirements?Read More →

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company wants to migrate to AWS.The company wants to use a multi-account structure with centrally managed access to all accounts and applications.The company also wants to keep the traffic on a private network.Multi-factor authentication (MFA) is required at login, and specific roles are assigned to user groups.The company must create separate accounts for development.staging, production, and shared network.The production account and the shared network account must have connectivity to all accounts.The development account and the staging account must have access only to each other.Which combination of steps should a solutions architect take 10 meet these requirements? (Choose three.)Read More →

A company runs its application in the eu-west-1 Region and has one account for each of its environments: development, testing, and production.All the environments are running 24 hours a day, 7 days a week by using stateful Amazon EC2 instances and Amazon RDS for MySQL databases.The databases are between 500 GB and 800 GB in size.The development team and testing team work on business days during business hours, but the production environment operates 24 hours a day, 7 days a week.The company wants to reduce costs.All resources are tagged with an environment tag with either development, testing, or production as the key.What should a solutions architect do to reduce costs with the LEAST operational effort?Read More →

A company is building a software-as-a-service (SaaS) solution on AWS.The company has deployed an Amazon API Gateway REST API with AWS Lambda integration in multiple AWS Regions and in the same production account.The company offers tiered pricing that gives customers the ability to pay for the capacity to make a certain number of API calls per second.The premium tier offers up to 3,000 calls per second, and customers are identified by a unique API key.Several premium tier customers in various Regions report that they receive error responses of 429 Too Many Requests from multiple API methods during peak usage hours.Logs indicate that the Lambda function is never invoked.What could be the cause of the error messages for these customers?Read More →

A company has purchased appliances from different vendors.The appliances all have IoT sensors.The sensors send status information in the vendors’ proprietary formats to a legacy application that parses the information into JSON.The parsing is simple, but each vendor has a unique format.Once daily, the application parses all the JSON records and stores the records in a relational database for analysis.The company needs to design a new data analysis solution that can deliver faster and optimize costs.Which solution will meet these requirements?Read More →

A company is migrating some of its applications to AWS.The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies.The company has set up an AWS Direct Connect connection in a central network account.The company expects to have hundreds of AWS accounts and VPCs in the near future.The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs.The company also wants to route its cloud resources to the internet through its on-premises data center.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has hundreds of AWS accounts.The company recently implemented a centralized internal process for purchasing new Reserved Instances and modifying existing Reserved Instances.This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement.Previously, business units directly purchased or modified Reserved Instances in their own respective AWS accounts autonomously.A solutions architect needs to enforce the new process in the most secure way possible.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company is running a critical application that uses an Amazon RDS for MySQL database to store data.The RDS DB instance is deployed in Multi-AZ mode.A recent RDS database failover test caused a 40-second outage to the application.A solutions architect needs to design a solution to reduce the outage time to less than 20 seconds.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →