SAP-C02 (Page 26)

A company wants to containerize a multi-tier web application and move the application from an on-premises data center to AWS.The application includes web.application, and database tiers.The company needs to make the application fault tolerant and scalable.Some frequently accessed data must always be available across application servers.Frontend web servers need session persistence and must scale to meet increases in traffic.Which solution will meet these requirements with the LEAST ongoing operational overhead?Read More →

A company needs to implement disaster recovery for a critical application that runs in a single AWS Region.The application’s users interact with a web frontend that is hosted on Amazon EC2 instances behind an Application Load Balancer (ALB).The application writes to an Amazon RDS for MySQL DB instance.The application also outputs processed documents that are stored in an Amazon S3 bucket.The company’s finance team directly queries the database to run reports.During busy periods, these queries consume resources and negatively affect application performance.A solutions architect must design a solution that will provide resiliency during a disaster.The solution must minimize data loss and must resolve the performance problems that result from the finance team’s queries.Which solution will meet these requirements?Read More →

A company’s web application has reliability issues.The application serves customers globally.The application runs on a single Amazon EC2 instance and performs read-intensive operations on an Amazon RDS for MySQL database.During high load, the application becomes unresponsive and requires a manual restart of the EC2 instance.A solutions architect must improve the application’s reliability.Which solution will meet this requirement with the LEAST development effort?Read More →

A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company’s finance team has a data processing application that uses AWS Lambda and Amazon DynamoDB.The company’s marketing team wants to access the data that is stored in the DynamoDB table.The DynamoDB table contains confidential data.The marketing team can have access to only specific attributes of data in the DynamoDB table.The finance team and the marketing team have separate AWS accounts.What should a solutions architect do to provide the marketing team with the appropriate access to the DynamoDB table?Read More →

A company uses a Grafana data visualization solution that runs on a single Amazon EC2 instance to monitor the health of the company’s AWS workloads.The company has invested time and effort to create dashboards that the company wants to preserve.The dashboards need to be highly available and cannot be down for longer than 10 minutes.The company needs to minimize ongoing maintenance.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses a load balancer to distribute traffic to Amazon EC2 instances in a single Availability Zone.The company is concerned about security and wants a solutions architect to re-architect the solution to meet the following requirements:• Inbound requests must be filtered for common vulnerability attacks.• Rejected requests must be sent to a third-party auditing application.• All resources should be highly available.Which solution meets these requirements?Read More →

A company is using an organization in AWS Organizations to manage hundreds of AWS accounts.A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities.The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.Which combination of steps should the solutions architect take to provide the baseline protection? (Choose three.)Read More →

A company needs to migrate an on-premises SFTP site to AWS.The SFTP site currently runs on a Linux VM.Uploaded files are made available to downstream applications through an NFS share.As part of the migration to AWS, a solutions architect must implement high availability.The solution must provide external vendors with a set of static public IP addresses that the vendors can allow.The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →

A company is planning to migrate several applications to AWS.The company does not have a good understanding of its entire application estate.The estate consists of a mixture of physical machines and VMs.One application that the company will migrate has many dependencies that are sensitive to latency.The company is unsure what all the dependencies are.However the company knows that the low-latency communications use a custom IP-based protocol that runs on port 1000.The company wants to migrate the application and these dependencies together to move all the low-latency interfaces to AWS at the same time.The company has installed the AWS Application Discovery Agent and has been collecting data for several months.What should the company do to identify the dependencies that need to be migrated in the same phase as the application?Read More →