SAP-C02 (Page 31)

A company is updating an application that customers use to make online orders.The number of attacks on the application by bad actors has increased recently.The company will host the updated application on an Amazon Elastic Container Service (Amazon ECS) cluster.The company will use Amazon DynamoDB to store application data.A public Application Load Balancer (ALB) will provide end users with access to the application.The company must prevent attacks and ensure business continuity with minimal service interruptions during an ongoing attack.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)Read More →

A company deploys workloads in multiple AWS accounts.Each account has a VPC with VPC flow logs published in text log format to a centralized Amazon S3 bucket.Each log file is compressed with gzip compression.The company must retain the log files indefinitely.A security engineer occasionally analyzes the logs by using Amazon Athena to query the VPC flow logs.The query performance is degrading over time as the number of ingested logs is growing.A solutions architect must improve the performance of the log analysis and reduce the storage space that the VPC flow logs use.Which solution will meet these requirements with the LARGEST performance improvement?Read More →

A company is designing an AWS Organizations structure.The company wants to standardize a process to apply tags across the entire organization.The company will require tags with specific values when a user creates a new resource.Each of the company’s OUs will have unique tag values.Which solution will meet these requirements?Read More →

A company has a new application that needs to run on five Amazon EC2 instances in a single AWS Region.The application requires high-throughput, low-latency network connections between all of the EC2 instances where the application will run.There is no requirement for the application to be fault tolerant.Which solution will meet these requirements?Read More →

A company has implemented an ordering system using an event-driven architecture.During initial testing, the system stopped processing orders.Further log analysis revealed that one order message in an Amazon Simple Queue Service (Amazon SQS) standard queue was causing an error on the backend and blocking all subsequent order messages.The visibility timeout of the queue is set to 30 seconds, and the backend processing timeout is set to 10 seconds.A solutions architect needs to analyze faulty order messages and ensure that the system continues to process subsequent messages.Which step should the solutions architect take to meet these requirements?Read More →

A company is migrating a legacy application from an on-premises data center to AWS.The application consists of a single application server and a Microsoft SQL Server database server.Each server is deployed on a VMware VM that consumes 500 TB of data across multiple attached volumes.The company has established a 10 Gbps AWS Direct Connect connection from the closest AWS Region to its on-premises data center.The Direct Connect connection is not currently in use by other services.Which combination of steps should a solutions architect take to migrate the application with the LEAST amount of downtime? (Choose two.)Read More →

A company wants to design a disaster recovery (DR) solution for an application that runs in the company’s data center.The application writes to an SMB file share and creates a copy on a second file share.Both file shares are in the data center.The application uses two types of files: metadata files and image files.The company wants to store the copy on AWS.The company needs the ability to use SMB to access the data from either the data center or AWS if a disaster occurs.The copy of the data is rarely accessed but must be available within 5 minutes.Read More →

A company is creating a solution that can move 400 employees into a remote working environment in the event of an unexpected disaster.The user desktops have a mix of Windows and Linux operating systems.Multiple types of software, such as web browsers and mail clients, are installed on each desktop.A solutions architect needs to implement a solution that can be integrated with the company’s on-premises Active Directory to allow employees to use their existing identity credentials.The solution must provide multifactor authentication (MFA) and must replicate the user experience from the existing desktops.Which solution will meet these requirements?Read More →

A solutions architect has implemented a SAML 2.0 federated identity solution with their company’s on-premises identity provider (IdP) to authenticate users’ access to the AWS environment.When the solutions architect tests authentication through the federated identity web portal, access to the AWS environment is granted.However, when test users attempt to authenticate through the federated identity web portal, they are not able to access the AWS environment.Which items should the solutions architect check to ensure identity federation is properly configured? (Choose three.)Read More →

A software as a service (SaaS) based company provides a case management solution to customers A3 part of the solution.The company uses a standalone Simple Mail Transfer Protocol (SMTP) server to send email messages from an application.The application also stores an email template for acknowledgement email messages that populate customer data before the application sends the email message to the customer.The company plans to migrate this messaging functionality to the AWS Cloud and needs to minimize operational overhead.Which solution will meet these requirements MOST cost-effectively?Read More →