SAP-C02 (Page 27)

A company is refactoring its on-premises order-processing platform in the AWS Cloud.The platform includes a web front end that is hosted on a fleet of VMs, RabbitMQ to connect the front end to the backend, and a Kubernetes cluster to run a containerized backend system to process the orders.The company does not want to make any major changes to the application.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has developed a web application.The company is hosting the application on a group of Amazon EC2 instances behind an Application Load Balancer.The company wants to improve the security posture of the application and plans to use AWS WAF web ACLs.The solution must not adversely affect legitimate traffic to the application.How should a solutions architect configure the web ACLs to meet these requirements?Read More →

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A company is running an application in the AWS Cloud.Recent application metrics show inconsistent response times and a significant increase in error rates.Calls to third-party services are causing the delays.Currently, the application calls third-party services synchronously by directly invoking an AWS Lambda function.A solutions architect needs to decouple the third-party service calls and ensure that all the calls are eventually completed.Which solution will meet these requirements?Read More →

A company is running applications on AWS in a multi-account environment.The company’s sales team and marketing team use separate AWS accounts in AWS Organizations.The sales team stores petabytes of data in an Amazon S3 bucket.The marketing team uses Amazon QuickSight for data visualizations.The marketing team needs access to data that the sates team stores in the S3 bucket.The company has encrypted the S3 bucket with an AWS Key Management Service (AWS KMS) key.The marketing team has already created the IAM service role for QuickSight to provide QuickSight access in the marketing AWS account.The company needs a solution that will provide secure access to the data in the S3 bucket across AWS accounts.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is planning to migrate its business-critical applications from an on-premises data center to AWS.The company has an on-premises installation of a Microsoft SQL Server Always On cluster.The company wants to migrate to an AWS managed database service.A solutions architect must design a heterogeneous database migration on AWS.Which solution will meet these requirements?Read More →

A publishing company’s design team updates the icons and other static assets that an ecommerce web application uses.The company serves the icons and assets from an Amazon S3 bucket that is hosted in the company’s production account.The company also uses a development account that members of the design team can access.After the design team tests the static assets in the development account, the design team needs to load the assets into the S3 bucket in the production account.A solutions architect must provide the design team with access to the production account without exposing other parts of the web application to the risk of unwanted changes.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company developed a pilot application by using AWS Elastic Beanstalk and Java.To save costs during development, the company’s development team deployed the application into a single-instance environment.Recent tests indicate that the application consumes more CPU than expected.CPU utilization is regularly greater than 85%, which causes some performance bottlenecks.A solutions architect must mitigate the performance issues before the company launches the application to production.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS Organizations to manage more than 1,000 AWS accounts.The company has created a new developer organization.There are 540 developer member accounts that must be moved to the new developer organization.All accounts are set up with all the required information so that each account can be operated as a standalone account.Which combination of steps should a solutions architect take to move all of the developer accounts to the new developer organization? (Choose three.)Read More →

A solutions architect needs to define a reference architecture for a solution for three-tier applications with web.application, and NoSQL data layers.The reference architecture must meet the following requirements:• High availability within an AWS Region• Able to fail over in 1 minute to another AWS Region for disaster recovery• Provide the most efficient solution while minimizing the impact on the user experienceWhich combination of steps will meet these requirements? (Choose three.)Read More →