SAP-C02 (Page 34)

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company wants to migrate to AWS.The company wants to use a multi-account structure with centrally managed access to all accounts and applications.The company also wants to keep the traffic on a private network.Multi-factor authentication (MFA) is required at login, and specific roles are assigned to user groups.The company must create separate accounts for development.staging, production, and shared network.The production account and the shared network account must have connectivity to all accounts.The development account and the staging account must have access only to each other.Which combination of steps should a solutions architect take 10 meet these requirements? (Choose three.)Read More →

A company runs its application in the eu-west-1 Region and has one account for each of its environments: development, testing, and production.All the environments are running 24 hours a day, 7 days a week by using stateful Amazon EC2 instances and Amazon RDS for MySQL databases.The databases are between 500 GB and 800 GB in size.The development team and testing team work on business days during business hours, but the production environment operates 24 hours a day, 7 days a week.The company wants to reduce costs.All resources are tagged with an environment tag with either development, testing, or production as the key.What should a solutions architect do to reduce costs with the LEAST operational effort?Read More →

A company is building a software-as-a-service (SaaS) solution on AWS.The company has deployed an Amazon API Gateway REST API with AWS Lambda integration in multiple AWS Regions and in the same production account.The company offers tiered pricing that gives customers the ability to pay for the capacity to make a certain number of API calls per second.The premium tier offers up to 3,000 calls per second, and customers are identified by a unique API key.Several premium tier customers in various Regions report that they receive error responses of 429 Too Many Requests from multiple API methods during peak usage hours.Logs indicate that the Lambda function is never invoked.What could be the cause of the error messages for these customers?Read More →

A company has purchased appliances from different vendors.The appliances all have IoT sensors.The sensors send status information in the vendors’ proprietary formats to a legacy application that parses the information into JSON.The parsing is simple, but each vendor has a unique format.Once daily, the application parses all the JSON records and stores the records in a relational database for analysis.The company needs to design a new data analysis solution that can deliver faster and optimize costs.Which solution will meet these requirements?Read More →

A company is migrating some of its applications to AWS.The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies.The company has set up an AWS Direct Connect connection in a central network account.The company expects to have hundreds of AWS accounts and VPCs in the near future.The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs.The company also wants to route its cloud resources to the internet through its on-premises data center.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has hundreds of AWS accounts.The company recently implemented a centralized internal process for purchasing new Reserved Instances and modifying existing Reserved Instances.This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement.Previously, business units directly purchased or modified Reserved Instances in their own respective AWS accounts autonomously.A solutions architect needs to enforce the new process in the most secure way possible.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A company is running a critical application that uses an Amazon RDS for MySQL database to store data.The RDS DB instance is deployed in Multi-AZ mode.A recent RDS database failover test caused a 40-second outage to the application.A solutions architect needs to design a solution to reduce the outage time to less than 20 seconds.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →

A solutions architect works for a government agency that has strict disaster recovery requirements.All Amazon Elastic Block Store (Amazon EBS) snapshots are required to be saved in at least two additional AWS Regions.The agency also is required to maintain the lowest possible operational overhead.Which solution meets these requirements?Read More →

An environmental company is deploying sensors in major cities throughout a country to measure air quality.The sensors connect to AWS IoT Core to ingest timeseries data readings.The company stores the data in Amazon DynamoDB.For business continuity, the company must have the ability to ingest and store data in two AWS Regions.Which solution will meet these requirements?Read More →