SAP-C02 (Page 29)

A software as a service (SaaS) company provides a media software solution to customers.The solution is hosted on 50 VPCs across various AWS Regions and AWS accounts.One of the VPCs is designated as a management VPC.The compute resources in the VPCs work independently.The company has developed a new feature that requires all 50 VPCs to be able to communicate with each other.The new feature also requires one-way access from each customer’s VPC to the company’s management VPC.The management VPC hosts a compute resource that validates licenses for the media software solution.The number of VPCs that the company will use to host the solution will continue to increase as the solution grows.Which combination of steps will provide the required VPC connectivity with the LEAST operational overhead? (Choose two.)Read More →

A company is running its solution on AWS in a manually created VPC.The company is using AWS CloudFormation to provision other parts of the infrastructure.According to a new requirement, the company must manage all infrastructure in an automatic way.What should the company do to meet this new requirement with the LEAST effort?Read More →

A company is planning to migrate an application to AWS.The application runs as a Docker container and uses an NFS version 4 file share.A solutions architect must design a secure and scalable containerized solution that does not require provisioning or management of the underlying infrastructure.Which solution will meet these requirements?Read More →

A company is using AWS Control Tower to manage AWS accounts in an organization in AWS Organizations.The company has an OU that contains accounts.The company must prevent any new or existing Amazon EC2 instances in the OU’s accounts from gaining a public IP address.Which solution will meet these requirements?Read More →

A company has a website that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are in an Auto Scaling group.The ALB is associated with an AWS WAF web ACL.The website often encounters attacks in the application layer.The attacks produce sudden and significant increases in traffic on the application server.The access logs show that each attack originates from different IP addresses.A solutions architect needs to implement a solution to mitigate these attacks.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company runs a web application on AWS.The web application delivers static content from an Amazon S3 bucket that is behind an Amazon CloudFront distribution.The application serves dynamic content by using an Application Load Balancer (ALB) that distributes requests to a fleet of Amazon EC2 instances in Auto Scaling groups.The application uses a domain name setup in Amazon Route 53.Some users reported occasional issues when the users attempted to access the website during peak hours.An operations team found that the ALB sometimes returned HTTP 503 Service Unavailable errors.The company wants to display a custom error message page when these errors occur.The page should be displayed immediately for this error code.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A financial services company loaded millions of historical stock trades into an Amazon DynamoDB table.The table uses on-demand capacity mode.Once each day at midnight, a few million new records are loaded into the table.Application read activity against the table happens in bursts throughout the day.and a limited set of keys are repeatedly looked up.The company needs to reduce costs associated with DynamoDB.Which strategy should a solutions architect recommend to meet this requirement?Read More →

An entertainment company recently launched a new game.To ensure a good experience for players during the launch period, the company deployed a static quantity of 12 r6g.16xlarge (memory optimized) Amazon EC2 instances behind a Network Load Balancer.The company’s operations team used the Amazon CloudWatch agent and a custom metric to include memory utilization in its monitoring strategy.Analysis of the CloudWatch metrics from the launch period showed consumption at about one quarter of the CPU and memory that the company expected.Initial demand for the game has subsided and has become more variable.The company decides to use an Auto Scaling group that monitors the CPU and memory consumption to dynamically scale the instance fleet.A solutions architect needs to configure the Auto Scaling group to meet demand in the most cost-effective way.Which solution will meet these requirements?Read More →

A team of data scientists is using Amazon SageMaker instances and SageMaker APIs to train machine learning (ML) models.The SageMaker instances are deployed in a VPC that does not have access to or from the internet.Datasets for ML model training are stored in an Amazon S3 bucket.Interface VPC endpoints provide access to Amazon S3 and the SageMaker APIs.Occasionally, the data scientists require access to the Python Package Index (PyPI) repository to update Python packages that they use as part of their workflow.A solutions architect must provide access to the PyPI repository while ensuring that the SageMaker instances remain isolated from the internet.Which solution will meet these requirements?Read More →

A company wants to migrate its website to AWS.The website uses containers that are deployed in an on-premises, self-managed Kubernetes cluster.All data for the website is stored in an on-premises PostgreSQL database.The company has decided to migrate the on-premises Kubernetes cluster to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.The EKS cluster will use EKS managed node groups with a static number of nodes.The company will also migrate the on-premises database to an Amazon RDS for PostgreSQL database.A solutions architect needs to estimate the total cost of ownership (TCO) for this workload before the migration.Which solution will provide the required TCO information?Read More →