SAP-C02 (Page 35)

An online survey company runs its application in the AWS Cloud.The application is distributed and consists of microservices that run in an automatically scaled Amazon Elastic Container Service (Amazon ECS) cluster.The ECS cluster is a target for an Application Load Balancer (ALB).The ALB is a custom origin for an Amazon CloudFront distribution.The company has a survey that contains sensitive data.The sensitive data must be encrypted when it moves through the application.The application’s data-handling microservice is the only microservice that should be able to decrypt the dataWhich solution will meet these requirements?Read More →

A company hosts a software as a service (SaaS) solution on AWS.The solution has an Amazon API Gateway API that serves an HTTPS endpoint.The API uses AWS Lambda functions for compute.The Lambda functions store data in an Amazon Aurora Serverless v1 database.The company used the AWS Serverless Application Model (AWS SAM) to deploy the solution.The solution extends across multiple Availability Zones and has no disaster recovery (DR) plan.A solutions architect must design a DR strategy that can recover the solution in another AWS Region.The solution has an RTO of 5 minutes and an RPO of 1 minute.What should the solutions architect do to meet these requirements?Read More →

An events company runs a ticketing platform on AWS.The company’s customers configure and schedule their events on the platform.The events result in large increases of traffic to the platform.The company knows the date and time of each customer’s events.The company runs the platform on an Amazon Elastic Container Service (Amazon ECS) cluster.The ECS cluster consists of Amazon EC2 On-Demand Instances that are in an Auto Scaling group.The Auto Scaling group uses a predictive scaling policy.The ECS cluster makes frequent requests to an Amazon S3 bucket to download ticket assets.The ECS cluster and the S3 bucket are in the same AWS Region and the same AWS account.Traffic between the ECS cluster and the S3 bucket flows across a NAT gateway.The company needs to optimize the cost of the platform without decreasing the platform’s availability.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is running a large containerized workload in the AWS Cloud.The workload consists of approximately 100 different services.The company uses Amazon Elastic Container Service (Amazon ECS) to orchestrate the workload.Recently the company’s development team started using AWS Fargate instead of Amazon EC2 instances in the ECS cluster.In the past, the workload has come close to running the maximum number of EC2 instances that are available in the account.The company is worried that the workload could reach the maximum number of ECS tasks that are allowed.A solutions architect must implement a solution that will notify the development team when Fargate reaches 80% of the maximum number of tasks.What should the solutions architect do to meet this requirement?Read More →

A company’s interactive web application uses an Amazon CloudFront distribution to serve images from an Amazon S3 bucket.Occasionally, third-party tools ingest corrupted images into the S3 bucket.This image corruption causes a poor user experience in the application later.The company has successfully implemented and tested Python logic to detect corrupt images.A solutions architect must recommend a solution to integrate the detection logic with minimal latency between the ingestion and serving.Which solution will meet these requirements?Read More →

A solutions architect is importing a VM from an on-premises environment by using the Amazon EC2 VM Import feature of AWS Import/Export.The solutions architect has created an AMI and has provisioned an Amazon EC2 instance that is based on that AMI.The EC2 instance runs inside a public subnet in a VPC and has a public IP address assigned.The EC2 instance does not appear as a managed instance in the AWS Systems Manager console.Which combination of steps should the solutions architect take to troubleshoot this issue? (Choose two.)Read More →

Accompany is building an application to collect and transmit sensor data from a factory.The application will use AWS IoT Core to send data from hundreds of devices to an Amazon S3 data lake.The company must enrich the data before loading the data into Amazon S3.The application will transmit the sensor data every 5 seconds.New sensor data must be available in Amazon S3 less than 30 minutes after the application collects the data.No other applications are processing the sensor data from AWS IoT Core.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is running a web-crawling process on a list of target URLs to obtain training documents for machine learning training algorithms.A fleet of Amazon EC2 t2.micro instances pulls the target URLs from an Amazon Simple Queue Service (Amazon SQS) queue.The instances then write the result of the crawling algorithm as a .csv file to an Amazon Elastic File System (Amazon EFS) volume.The EFS volume is mounted on all instances of the fleet.A separate system adds the URLs to the SQS queue at infrequent rates.The instances crawl each URL in 10 seconds or less.Metrics indicate that some instances are idle when no URLs are in the SQS queue.A solutions architect needs to redesign the architecture to optimize costs.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)Read More →

A company is running a containerized application in the AWS Cloud.The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances.The EC2 instances run in an Auto Scaling group.The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images.When a new image version is uploaded, the new image version receives a unique tag.The company needs a solution that inspects new image versions for common vulnerabilities and exposures.The solution must automatically delete new image tags that have Critical or High severity findings.The solution also must notify the development team when such a deletion occurs.Which solution meets these requirements?Read More →

An international delivery company hosts a delivery management system on AWS.Drivers use the system to upload confirmation of delivery.Confirmation includes the recipient’s signature or a photo of the package with the recipient.The driver’s handheld device uploads signatures and photos through FTP to a single Amazon EC2 instance.Each handheld device saves a file in a directory based on the signed-in user, and the file name matches the delivery number.The EC2 instance then adds metadata to the file after querying a central database to pull delivery information.The file is then placed in Amazon S3 for archiving.As the company expands, drivers report that the system is rejecting connections.The FTP server is having problems because of dropped connections and memory issues in response to these problems, a system engineer schedules a cron task to reboot the EC2 instance every 30 minutes.The billing team reports that files are not always in the archive and that the central system is not always updated.A solutions architect needs to design a solution that maximizes scalability to ensure that the archive always receives the files and that systems are always updated.The handheld devices cannot be modified, so the company cannot deploy a new application.Which solution will meet these requirements?Read More →