SAP-C02 (Page 28)

A company is planning to migrate an on-premises data center to AWS.The company currently hosts the data center on Linux-based VMware VMs.A solutions architect must collect information about network dependencies between the VMs.The information must be in the form of a diagram that details host IP addresses, hostnames, and network connection information.Which solution will meet these requirements?Read More →

A company has multiple AWS accounts.The company recently had a security audit that revealed many unencrypted Amazon Elastic Block Store (Amazon EBS) volumes attached to Amazon EC2 instances.A solutions architect must encrypt the unencrypted volumes and ensure that unencrypted volumes will be detected automatically in the future.Additionally, the company wants a solution that can centrally manage multiple AWS accounts with a focus on compliance and security.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number (PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →

A company gives users the ability to upload images from a custom application.The upload process invokes an AWS Lambda function that processes and stores the image in an Amazon S3 bucket.The application invokes the Lambda function by using a specific function version ARN.The Lambda function accepts image processing parameters by using environment variables.The company often adjusts the environment variables of the Lambda function to achieve optimal image processing output.The company tests different parameters and publishes a new function version with the updated environment variables after validating results.This update process also requires frequent changes to the custom application to invoke the new function version ARN.These changes cause interruptions for users.A solutions architect needs to simplify this process to minimize disruption to users.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A global media company is planning a multi-Region deployment of an application.Amazon DynamoDB global tables will back the deployment to keep the user experience consistent across the two continents where users are concentrated.Each deployment will have a public Application Load Balancer (ALB).The company manages public DNS internally.The company wants to make the application available through an apex domain.Which solution will meet these requirements with the LEAST effort?Read More →

A manufacturing company is building an inspection solution for its factory.The company has IP cameras at the end of each assembly line.The company has used Amazon SageMaker to train a machine learning (ML) model to identify common defects from still images.The company wants to provide local feedback to factory workers when a defect is detected.The company must be able to provide this feedback even if the factory’s internet connectivity is down.The company has a local Linux server that hosts an API that provides local feedback to the workers.How should the company deploy the ML model to meet these requirements?Read More →

A company has a critical application in which the data tier is deployed in a single AWS Region.The data tier uses an Amazon DynamoDB table and an Amazon Aurora MySQL DB cluster.The current Aurora MySQL engine version supports a global database.The application tier is already deployed in two Regions.Company policy states that critical applications must have application tier components and data tier components deployed across two Regions.The RTO and RPO must be no more than a few minutes each.A solutions architect must recommend a solution to make the data tier compliant with company policy.Which combination of steps will meet these requirements? (Choose two.)Read More →

A solutions architect must create a business case for migration of a company’s on-premises data center to the AWS Cloud.The solutions architect will use a configuration management database (CMDB) export of all the company’s servers to create the case.Which solution will meet these requirements MOST cost-effectively?Read More →

A company runs an application on a fleet of Amazon EC2 instances that are in private subnets behind an internet-facing Application Load Balancer (ALB).The ALB is the origin for an Amazon CloudFront distribution.An AWS WAF web ACL that contains various AWS managed rules is associated with the CloudFront distribution.The company needs a solution that will prevent internet traffic from directly accessing the ALB.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has a few AWS accounts for development and wants to move its production application to AWS.The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current production accounts and future production accounts only.The company needs a solution that includes built-in blueprints and guardrails.Which combination of steps will meet these requirements? (Choose three.)Read More →