SAP-C02 (Page 28)

A company is running an application in the AWS Cloud.The application consists of microservices that run on a fleet of Amazon EC2 instances in multiple Availability Zones behind an Application Load Balancer.The company recently added a new REST API that was implemented in Amazon API Gateway.Some of the older microservices that run on EC2 instances need to call this new API.The company does not want the API to be accessible from the public internet and does not want proprietary data to traverse the public internet.What should a solutions architect do to meet these requirements?Read More →

A company is running multiple workloads in the AWS Cloud.The company has separate units for software development.The company uses AWS Organizations and federation with SAML to give permissions to developers to manage resources in their AWS accounts.The development units each deploy their production workloads into a common production account.Recently, an incident occurred in the production account in which members of a development unit terminated an EC2 instance that belonged to a different development unit.A solutions architect must create a solution that prevents a similar incident from happening in the future.The solution also must allow developers the possibility to manage the instances used for their workloads.Which strategy will meet these requirements?Read More →

A telecommunications company is running an application on AWS.The company has set up an AWS Direct Connect connection between the company’s on-premises data center and AWS.The company deployed the application on Amazon EC2 instances in multiple Availability Zones behind an internal Application Load Balancer (ALB).The company’s clients connect from the on-premises network by using HTTPS.The TLS terminates in the ALB.The company has multiple target groups and uses path-based routing to forward requests based on the URL path.The company is planning to deploy an on-premises firewall appliance with an allow list that is based on IP address.A solutions architect must develop a solution to allow traffic flow to AWS from the on-premises network so that the clients can continue to access the application.Which solution will meet these requirements?Read More →

A company has many separate AWS accounts and uses no central billing or management.Each AWS account hosts services for different departments in the company.The company has a Microsoft Azure Active Directory that is deployed.A solutions architect needs to centralize billing and management of the company’s AWS accounts.The company wants to start using identity federation instead of manual user management.The company also wants to use temporary credentials instead of long-lived access keys.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company deploys a new web application.As part of the setup, the company configures AWS WAF to log to Amazon S3 through Amazon Kinesis Data Firehose.The company develops an Amazon Athena query that runs once daily to return AWS WAF log data from the previous 24 hours.The volume of daily logs is constant.However, over time, the same query is taking more time to run.A solutions architect needs to design a solution to prevent the query time from continuing to increase.The solution must minimize operational overhead.Which solution will meet these requirements?Read More →

A company is running an application in the AWS Cloud.The core business logic is running on a set of Amazon EC2 instances in an Auto Scaling group.An Application Load Balancer (ALB) distributes traffic to the EC2 instances.Amazon Route 53 record api.example.com is pointing to the ALB.The company’s development team makes major updates to the business logic.The company has a rule that when changes are deployed, only 10% of customers can receive the new logic during a testing window.A customer must use the same version of the business logic during the testing window.How should the company deploy the updates to meet these requirements?Read More →

A global manufacturing company plans to migrate the majority of its applications to AWS.However, the company is concerned about applications that need to remain within a specific country or in the company’s central on-premises data center because of data regulatory requirements or requirements for latency of single-digit milliseconds.The company also is concerned about the applications that it hosts in some of its factory sites, where limited network infrastructure exists.The company wants a consistent developer experience so that its developers can build applications once and deploy on premises, in the cloud, or in a hybrid architecture.The developers must be able to use the same tools, APIs, and services that are familiar to them.Which solution will provide a consistent hybrid experience to meet these requirements?Read More →

A company has an IoT platform that runs in an on-premises environment.The platform consists of a server that connects to IoT devices by using the MQTT protocol.The platform collects telemetry data from the devices at least once every 5 minutes.The platform also stores device metadata in a MongoDB cluster.An application that is installed on an on-premises machine runs periodic jobs to aggregate and transform the telemetry and device metadata.The application creates reports that users view by using another web application that runs on the same on-premises machine.The periodic jobs take 120-600 seconds to run.However, the web application is always running.The company is moving the platform to AWS and must reduce the operational overhead of the stack.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.The company has the following DNS resolution requirements:On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company is providing weather data over a REST-based API to several customers.The API is hosted by Amazon API Gateway and is integrated with different AWS Lambda functions for each API operation.The company uses Amazon Route 53 for DNS and has created a resource record of weather.example.com.The company stores data for the API in Amazon DynamoDB tables.The company needs a solution that will give the API the ability to fail over to a different AWS Region.Which solution will meet these requirements?Read More →