SAP-C02 (Page 27)

A company is storing sensitive data in an Amazon S3 bucket.The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years.The company’s security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket.Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)Read More →

A company has set up its entire infrastructure on AWS.The company uses Amazon EC2 instances to host its ecommerce website and uses Amazon S3 to store static data.Three engineers at the company handle the cloud administration and development through one AWS account.Occasionally, an engineer alters an EC2 security group configuration of another engineer and causes noncompliance issues in the environment.A solutions architect must set up a system that tracks changes that the engineers make.The system must send alerts when the engineers make noncompliant changes to the security settings for the EC2 instances.What is the FASTEST way for the solutions architect to meet these requirements?Read More →

A company is hosting an application on AWS for a project that will run for the next 3 years.The application consists of 20 Amazon EC2 On-Demand Instances that are registered in a target group for a Network Load Balancer (NLB).The instances are spread across two Availability Zones.The application is stateless and runs 24 hours a day, 7 days a week.The company receives reports from users who are experiencing slow responses from the application.Performance metrics show that the instances are at 10% CPU utilization during normal application use.However, the CPU utilization increases to 100% at busy times, which typically last for a few hours.The company needs a new architecture to resolve the problem of slow responses from the application.Which solution will meet these requirements MOST cost-effectively?Read More →

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →

A company has deployed applications to thousands of Amazon EC2 instances in an AWS account.A security audit discovers that several unencrypted Amazon Elastic Block Store (Amazon EBS) volumes are attached to the EC2 instances.The company’s security policy requires the EBS volumes to be encrypted.The company needs to implement an automated solution to encrypt the EBS volumes.The solution also must prevent development teams from creating unencrypted EBS volumes.Which solution will meet these requirements?Read More →

A company is migrating its on-premises IoT platform to AWS.The platform consists of the following components:• A MongoDB cluster as a data store for all collected and processed IoT data.• An application that uses Message Queuing Telemetry Transport (MQTT) to connect to IoT devices every 5 minutes to collect data.• An application that runs jobs periodically to generate reports from the IoT data.The jobs take 120-600 seconds to finish running.• A web application that runs on a web server.End users use the web application to generate reports that are accessible to the general public.The company needs to migrate the platform to AWS to reduce operational overhead while maintaining performance.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A utility company wants to collect usage data every 5 minutes from its smart meters to facilitate time-of-use metering.When a meter sends data to AWS, the data is sent to Amazon API Gateway, processed by an AWS Lambda function.and stored in an Amazon DynamoDB table.During the pilot phase, the Lambda functions took from 3 to 5 seconds to complete.As more smart meters are deployed, the engineers notice the Lambda functions are taking from 1 to 2 minutes to complete.The functions are also increasing in duration as new types of metrics are collected from the devices.There are many ProvisionedThroughputExceededException errors while performing PUT operations on DynamoDB, and there are also many TooManyRequestsException errors from Lambda.Which combination of changes will resolve these issues? (Choose two.)Read More →

A company is using a single AWS Region for its ecommerce website.The website includes a web application that runs on several Amazon EC2 instances behind an Application Load Balancer (ALB).The website also includes an Amazon DynamoDB table.A custom domain name in Amazon Route 53 is linked to the ALB.The company created an SSL/TLS certificate in AWS Certificate Manager (ACM) and attached the certificate to the ALB.The company is not using a content delivery network as part of its design.The company wants to replicate its entire application stack in a second Region to provide disaster recovery, plan for future growth, and provide improved access time to users.A solutions architect needs to implement a solution that achieves these goals and minimizes administrative overhead.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A company is deploying a new web-based application and needs a storage solution for the Linux application servers.The company wants to create a single location for updates to application data for all instances.The active dataset will be up to 100 GB in size.A solutions architect has determined that peak operations will occur for 3 hours daily and will require a total of 225 MiBps of read throughput.The solutions architect must design a Multi-AZ solution that makes a copy of the data available in another AWS Region for disaster recovery (DR).The DR copy has an RPO of less than 1 hour.Which solution will meet these requirements?Read More →

A company uses AWS Organizations to manage its development environment.Each development team at the company has its own AWS account.Each account has a single VPC and CIDR blocks that do not overlap.The company has an Amazon Aurora DB cluster in a shared services account.All the development teams need to work with live data from the DB cluster.Which solution will provide the required connectivity to the DB cluster with the LEAST operational overhead?Read More →