SAP-C02 (Page 33)

A company is building a solution in the AWS Cloud.Thousands or devices will connect to the solution and send data.Each device needs to be able to send and receive data in real time over the MQTT protocol.Each device must authenticate by using a unique X.509 certificate.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is running several workloads in a single AWS account.A new company policy states that engineers can provision only approved resources and that engineers must use AWS CloudFormation to provision these resources.A solutions architect needs to create a solution to enforce the new restriction on the IAM role that the engineers use for access.What should the solutions architect do to create the solution?Read More →

A solutions architect is designing the data storage and retrieval architecture for a new application that a company will be launching soon.The application is designed to ingest millions of small records per minute from devices all around the world.Each record is less than 4 KB in size and needs to be stored in a durable location where it can be retrieved with low latency.The data is ephemeral and the company is required to store the data for 120 days only, after which the data can be deleted.The solutions architect calculates that, during the course of a year, the storage requirements would be about 10-15 TB.Which storage strategy is the MOST cost-effective and meets the design requirements?Read More →

A retail company is hosting an ecommerce website on AWS across multiple AWS Regions.The company wants the website to be operational at all times for online purchases.The website stores data in an Amazon RDS for MySQL DB instance.Which solution will provide the HIGHEST availability for the database?Read More →

Example Corp. has an on-premises data center and a VPC named VPC A in the Example Corp. AWS account. The on-premises network connects to VPC A through an AWS Site-To-Site VPN. The on-premises servers can properly access VPC A. Example Corp. just acquired AnyCompany, which has a VPC named VPC B. There is no IP address overlap among these networks. Example Corp. has peered VPC A and VPC B.Example Corp. wants to connect from its on-premise servers to VPC B. Example Corp. has properly set up the network ACL and security groups.Which solution will meet this requirement with the LEAST operational effort?Read More →

A company recently completed the migration from an on-premises data center to the AWS Cloud by using a replatforming strategy.One of the migrated servers is running a legacy Simple Mail Transfer Protocol (SMTP) service that a critical application relies upon.The application sends outbound email messages to the company’s customers.The legacy SMTP server does not support TLS encryption and uses TCP port 25.The application can use SMTP only.The company decides to use Amazon Simple Email Service (Amazon SES) and to decommission the legacy SMTP server.The company has created and validated the SES domain.The company has lifted the SES limits.What should the company do to modify the application to send email messages from Amazon SES?Read More →

A company recently acquired several other companies.Each company has a separate AWS account with a different billing and reporting method.The acquiring company has consolidated all the accounts into one organization in AWS Organizations.However, the acquiring company has found it difficult to generate a cost report that contains meaningful groups for all the teams.The acquiring company’s finance team needs a solution to report on costs for all the companies through a self-managed application.Which solution will meet these requirements?Read More →

A company is building an electronic document management system in which users upload their documents.The application stack is entirely serverless and runs on AWS in the eu-central-1 Region.The system includes a web application that uses an Amazon CloudFront distribution for delivery with Amazon S3 as the origin.The web application communicates with Amazon API Gateway Regional endpoints.The API Gateway APIs call AWS Lambda functions that store metadata in an Amazon Aurora Serverless database and put the documents into an S3 bucket.The company is growing steadily and has completed a proof of concept with its largest customer.The company must improve latency outside of Europe.Which combination of actions will meet these requirements? (Choose two.)Read More →

A team collects and routes behavioral data for an entire company.The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway.Each public subnet also contains a NAT gateway.Most of the company’s applications read from and write to Amazon Kinesis Data Streams.Most of the workloads run in private subnets.A solutions architect must review the infrastructure.The solution architect needs to reduce costs and maintain the function of the applications.The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high.A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category.What should the solutions architect do to meet these requirements?Read More →

A retail company has an on-premises data center in Europe.The company also has a multi-Region AWS presence that includes the eu-west-1 and us-east-1 Regions.The company wants to be able to route network traffic from its on-premises infrastructure into VPCs in either of those Regions.The company also needs to support traffic that is routed directly between VPCs in those Regions.No single points of failure can exist on the network.The company already has created two 1 Gbps AWS Direct Connect connections from its on-premises data center.Each connection goes into a separate Direct Connect location in Europe for high availability.These two locations are named DX-A and DX-B, respectively.Each Region has a single AWS Transit Gateway that is configured to route all inter-VPC traffic within that Region.Which solution will meet these requirements?Read More →