SAP-C02 (Page 30)

A company has an asynchronous HTTP application that is hosted as an AWS Lambda function.A public Amazon API Gateway endpoint invokes the Lambda function.The Lambda function and the API Gateway endpoint reside in the us-east-1 Region.A solutions architect needs to redesign the application to support failover to another AWS Region.Which solution will meet these requirements?Read More →

A retail company has structured its AWS accounts to be part of an organization in AWS Organizations.The company has set up consolidated billing and has mapped its departments to the following OUs: Finance, Sales, Human Resources (HR), Marketing, and Operations.Each OU has multiple AWS accounts, one for each environment within a department.These environments are development, test, pre-production, and production.The HR department is releasing a new system that will launch in 3 months.In preparation, the HR department has purchased several Reserved Instances (RIs) in its production AWS account.The HR department will install the new application on this account.The HR department wants to make sure that other departments cannot share the RI discounts.Which solution will meet these requirements?Read More →

A large company is running a popular web application.The application runs on several Amazon EC2 Linux instances in an Auto Scaling group in a private subnet.An Application Load Balancer is targeting the instances in the Auto Scaling group in the private subnet.AWS Systems Manager Session Manager is configured, and AWS Systems Manager Agent is running on all the EC2 instances.The company recently released a new version of the application.Some EC2 instances are now being marked as unhealthy and are being terminated.As a result, the application is running at reduced capacity.A solutions architect tries to determine the root cause by analyzing Amazon CloudWatch logs that are collected from the application, but the logs are inconclusive.How should the solutions architect gain access to an EC2 instance to troubleshoot the issue?Read More →

A company wants to deploy an AWS WAF solution to manage AWS WAF rules across multiple AWS accounts.The accounts are managed under different OUs in AWS Organizations.Administrators must be able to add or remove accounts or OUs from managed AWS WAF rule sets as needed.Administrators also must have the ability to automatically update and remediate noncompliant AWS WAF rules in all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

A solutions architect is auditing the security setup or an AWS Lambda function for a company.The Lambda function retrieves, the latest changes from an Amazon Aurora database.The Lambda function and the database run in the same VPC.Lambda environment variables are providing the database credentials to the Lambda function.The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS).The data must not travel across the Internet.If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.What should the solutions architect recommend to meet these requirements?Read More →

A large mobile gaming company has successfully migrated all of its on-premises infrastructure to the AWS Cloud.A solutions architect is reviewing the environment to ensure that it was built according to the design and that it is running in alignment with the Well-Architected Framework.While reviewing previous monthly costs in Cost Explorer, the solutions architect notices that the creation and subsequent termination of several large instance types account for a high proportion of the costs.The solutions architect finds out that the company’s developers are launching new Amazon EC2 instances as part of their testing and that the developers are not using the appropriate instance types.The solutions architect must implement a control mechanism to limit the instance types that only the developers can launch.Which solution will meet these requirements?Read More →

A company is developing and hosting several projects in the AWS Cloud.The projects are developed across multiple AWS accounts under the same organization in AWS Organizations.The company requires the cost for cloud infrastructure to be allocated to the owning project.The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.Which actions should a solutions architect lake to resolve the problem and prevent it from happening in the future? (Choose three.)Read More →

A company has an on-premises monitoring solution using a PostgreSQL database for persistence of events.The database is unable to scale due to heavy ingestion and it frequently runs out of storage.The company wants to create a hybrid solution and has already set up a VPN connection between its network and AWS.The solution should include the following attributes:• Managed AWS services to minimize operational complexity.• A buffer that automatically scales to match the throughput of data and requires no ongoing administration.• A visualization tool to create dashboards to observe events in near-real time.• Support for semi-structured JSON data and dynamic schemas.Which combination of components will enable the company to create a monitoring solution that will satisfy these requirements? (Choose two.)Read More →

A company is running an application in the AWS Cloud.The application runs on containers m an Amazon Elastic Container Service (Amazon ECS) cluster.The ECS tasks use the Fargate launch type.The application’s data is relational and is stored in Amazon Aurora MySQL.To meet regulatory requirements, the application must be able to recover to a separate AWS Region in the event of an application failure.In case of a failure, no data can be lost.Which solution will meet these requirements with the LEAST amount of operational overhead?Read More →

A digital marketing company has multiple AWS accounts that belong to various teams.The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company’s marketing campaigns.The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects.A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account.The solutions architect also has set up a custom AWS Key Management Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket.However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Access Denied error.The solutions architect must ensure that users in the Strategy account can access the S3 bucket.The solution must provide these users with only the minimum permissions that they need.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →