SAP-C02 (Page 27)

A delivery company is running a serverless solution in the AWS Cloud.The solution manages user data, delivery information, and past purchase details.The solution consists of several microservices.The central user service stores sensitive data in an Amazon DynamoDB table.Several of the other microservices store a copy of parts of the sensitive data in different storage services.The company needs the ability to delete user information upon request.As soon as the central user service deletes a user, every other microservice must also delete its copy of the data immediately.Which solution will meet these requirements?Read More →

A company is serving files to its customers through an SFTP server that is accessible over the internet.The SFTP server is running on a single Amazon EC2 instance with an Elastic IP address attached.Customers connect to the SFTP server through its Elastic IP address and use SSH for authentication.The EC2 instance also has an attached security group that allows access from all customer IP addresses.A solutions architect must implement a solution to improve availability, minimize the complexity of infrastructure management, and minimize the disruption to customers who access files.The solution must not change the way customers connect.Which solution will meet these requirements?Read More →

A company has an application that runs as a ReplicaSet of multiple pods in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.The EKS cluster has nodes in multiple Availability Zones.The application generates many small files that must be accessible across all running instances of the application.The company needs to back up the files and retain the backups for 1 year.Which solution will meet these requirements while providing the FASTEST storage performance?Read More →

A company uses an AWS CodeCommit repository.The company must store a backup copy of the data that is in the repository in a second AWS Region.Which solution will meet these requirements?Read More →

A company is running a web application in a VPC.The web application runs on a group of Amazon EC2 instances behind an Application Load Balancer (ALB).The ALB is using AWS WAF.An external customer needs to connect to the web application.The company must provide IP addresses to all external customers.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses an Amazon Aurora PostgreSQL DB cluster for applications in a single AWS Region.The company’s database team must monitor all data activity on all the databases.Which solution will achieve this goal?Read More →

A company has an organization in AWS Organizations that includes a separate AWS account for each of the company’s departments.Application teams from different departments develop and deploy solutions independently.The company wants to reduce compute costs and manage costs appropriately across departments.The company also wants to improve visibility into billing for individual departments.The company does not want to lose operational flexibility when the company selects compute resources.Which solution will meet these requirements?Read More →

A company has a website that serves many visitors.The company deploys a backend service for the website in a primary AWS Region and a disaster recovery (DR) Region.A single Amazon CloudFront distribution is deployed for the website.The company creates an Amazon Route 53 record set with health checks and a failover routing policy for the primary Region’s backend service.The company configures the Route 53 record set as an origin for the CloudFront distribution.The company configures another record set that points to the backend service’s endpoint in the DR Region as a secondary failover record type.The TTL for both record sets is 60 seconds.Currently, failover takes more than 1 minute.A solutions architect must design a solution that will provide the fastest failover time.Which solution will achieve this goal?Read More →

A company hosts a VPN in an on-premises data center.Employees currently connect to the VPN to access files in their Windows home directories.Recently, there has been a large growth in the number of employees who work remotely.As a result, bandwidth usage for connections into the data center has begun to reach 100% during business hours.The company must design a solution on AWS that will support the growth of the company’s remote workforce, reduce the bandwidth usage for connections into the data center, and reduce operational overhead.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)Read More →

A company is changing the way that it handles patching of Amazon EC2 instances in its application account.The company currently patches instances over the internet by using a NAT gateway in a VPC in the application account.The company has EC2 instances set up as a patch source repository in a dedicated private VPC in a core account.The company wants to use AWS Systems Manager Patch Manager and the patch source repository in the core account to patch the EC2 instances in the application account.The company must prevent all EC2 instances in the application account from accessing the internet.The EC2 instances in the application account need to access Amazon S3, where the application data is stored.These EC2 instances need connectivity to Systems Manager and to the patch source repository in the private VPC in the core account.Which solution will meet these requirements?Read More →