SAP-C02 (Page 29)

A company uses AWS Organizations with a single OU named Production to manage multiple accounts.All accounts are members of the Production OU.Administrators use deny list SCPs in the root of the organization to manage access to restricted services.The company recently acquired a new business unit and invited the new unit’s existing AWS account to the organization.Once onboarded, the administrators of the new business unit discovered that they are not able to update existing AWS Config rules to meet the company’s policies.Which option will allow administrators to make changes and continue to enforce the current policies without introducing additional long-term maintenance?Read More →

A company is running a two-tier web-based application in an on-premises data center.The application layer consists of a single server running a stateful application.The application connects to a PostgreSQL database running on a separate server.The application’s user base is expected to grow significantly, so the company is migrating the application and database to AWS.The solution will use Amazon Aurora PostgreSQL, Amazon EC2 Auto Scaling, and Elastic Load Balancing.Which solution will provide a consistent user experience that will allow the application and database tiers to scale?Read More →

A company is running a traditional web application on Amazon EC2 instances.The company needs to refactor the application as microservices that run on containers.Separate versions of the application exist in two distinct environments: production and testing.Load for the application is variable, but the minimum load and the maximum load are known.A solutions architect needs to design the updated application with a serverless architecture that minimizes operational complexity.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has a multi-tier web application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are in an Auto Scaling group.The ALB and the Auto Scaling group are replicated in a backup AWS Region.The minimum value and the maximum value for the Auto Scaling group are set to zero.An Amazon RDS Multi-AZ DB instance stores the application’s data.The DB instance has a read replica in the backup Region.The application presents an endpoint to end users by using an Amazon Route 53 record.The company needs to reduce its RTO to less than 15 minutes by giving the application the ability to automatically fail over to the backup Region.The company does not have a large enough budget for an active-active strategy.What should a solutions architect recommend to meet these requirements?Read More →

A company is hosting a critical application on a single Amazon EC2 instance.The application uses an Amazon ElastiCache for Redis single-node cluster for an in-memory data store.The application uses an Amazon RDS for MariaDB DB instance for a relational database.For the application to function, each piece of the infrastructure must be healthy and must be in an active state.A solutions architect needs to improve the application’s architecture so that the infrastructure can automatically recover from failure with the least possible downtime.Which combination of steps will meet these requirements? (Choose three.)Read More →

A retail company is operating its ecommerce application on AWS.The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The company uses an Amazon RDS DB instance as the database backend.Amazon CloudFront is configured with one origin that points to the ALB.Static content is cached.Amazon Route 53 is used to host all public zones.After an update of the application, the ALB occasionally returns a 502 status code (Bad Gateway) error.The root cause is malformed HTTP headers that are returned to the ALB.The webpage returns successfully when a solutions architect reloads the webpage immediately after the error occurs.While the company is working on the problem, the solutions architect needs to provide a custom error page instead of the standard ALB error page to visitors.Which combination of steps will meet this requirement with the LEAST amount of operational overhead? (Choose two.)Read More →

A company has many AWS accounts and uses AWS Organizations to manage all of them.A solutions architect must implement a solution that the company can use to share a common network across multiple accounts.The company’s infrastructure team has a dedicated infrastructure account that has a VPC.The infrastructure team must use this account to manage the network.Individual accounts cannot have the ability to manage their own networks.However, individual accounts must be able to create AWS resources within subnets.Which combination of actions should the solutions architect perform to meet these requirements? (Choose two.)Read More →

A company wants to use a third-party software-as-a-service (SaaS) application.The third-party SaaS application is consumed through several API calls.The third-party SaaS application also runs on AWS inside a VPC.The company will consume the third-party SaaS application from inside a VPC.The company has internal security policies that mandate the use of private connectivity that does not traverse the internet.No resources that run in the company VPC are allowed to be accessed from outside the company’s VPC.All permissions must conform to the principles of least privilege.Which solution meets these requirements?Read More →

A finance company is running its business-critical application on current-generation Linux EC2 instances.The application includes a self-managed MySQL database performing heavy I/O operations.The application is working fine to handle a moderate amount of traffic during the month.However, it slows down during the final three days of each month due to month-end reporting, even though the company is using Elastic Load Balancers and Auto Scaling within its infrastructure to meet the increased demand.Which of the following actions would allow the database to handle the month-end load with the LEAST impact on performance?Read More →

A company runs a Java application that has complex dependencies on VMs that are in the company’s data center.The application is stable.but the company wants to modernize the technology stack.The company wants to migrate the application to AWS and minimize the administrative overhead to maintain the servers.Which solution will meet these requirements with the LEAST code changes?Read More →