SAP-C02 (Page 35)

A company needs to use an AWS Transfer Family SFTP-enabled server with an Amazon S3 bucket to receive updates from a third-party data supplier.The data is encrypted with Pretty Good Privacy (PGP) encryption.The company needs a solution that will automatically decrypt the data after the company receives the data.A solutions architect will use a Transfer Family managed workflow.The company has created an IAM service role by using an IAM policy that allows access to AWS Secrets Manager and the S3 bucket.The role’s trust relationship allows the transfer amazonaws.com service to assume the role.What should the solutions architect do next to complete the solution for automatic decryption?Read More →

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company’s AWS environments.The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region.The company has set up routing from the shared services VPC to other VPCs.Which steps should the solutions architect recommend to meet these requirements? (Choose three.)Read More →

A company is building a hybrid environment that includes servers in an on-premises data center and in the AWS Cloud.The company has deployed Amazon EC2 instances in three VPCs.Each VPC is in a different AWS Region.The company has established an AWS Direct.Connect connection to the data center from the Region that is closest to the data center.The company needs the servers in the on-premises data center to have access to the EC2 instances in all three VPCs.The servers in the on-premises data center also must have access to AWS public services.Which combination of steps will meet these requirements with the LEAST cost? (Choose two.)Read More →

A company’s compliance audit reveals that some Amazon Elastic Block Store (Amazon EBS) volumes that were created in an AWS account were not encrypted.A solutions architect must implement a solution to encrypt all new EBS volumes at rest.Which solution will meet this requirement with the LEAST effort?Read More →

A company needs to implement a disaster recovery (DR) plan for a web application.The application runs in a single AWS Region.The application uses microservices that run in containers.The containers are hosted on AWS Fargate in Amazon Elastic Container Service (Amazon ECS).The application has an Amazon RDS for MySQL DB instance as its data layer and uses Amazon Route 53 for DNS resolution.An Amazon CloudWatch alarm invokes an Amazon EventBridge rule if the application experiences a failure.A solutions architect must design a DR solution to provide application recovery to a separate Region.The solution must minimize the time that is necessary to recover from a failure.Which solution will meet these requirements?Read More →

A company needs to establish a connection from its on-premises data center to AWS.The company needs to connect all of its VPCs that are located in different AWS Regions with transitive routing capabilities between VPC networks.The company also must reduce network outbound traffic costs, increase bandwidth throughput, and provide a consistent network experience for end users.Which solution will meet these requirements?Read More →

A company runs applications in hundreds of production AWS accounts.The company uses AWS Organizations with all features enabled and has a centralized backup operation that uses AWS Backup.The company is concerned about ransomware attacks.To address this concern, the company has created a new policy that all backups must be resilient to breaches of privileged-user credentials in any production account.Which combination of steps will meet this new requirement? (Choose three.)Read More →

A company runs a processing engine in the AWS Cloud.The engine processes environmental data from logistics centers to calculate a sustainability index.The company has millions of devices in logistics centers that are spread across Europe.The devices send information to the processing engine through a RESTful API.The API experiences unpredictable bursts of traffic.The company must implement a solution to process all data that the devices send to the processing engine.Data loss is unacceptable.Which solution will meet these requirements?Read More →

A solutions architect wants to make sure that only AWS users or roles with suitable permissions can access a new Amazon API Gateway endpoint.The solutions architect wants an end-to-end view of each request to analyze the latency of the request and create service maps.How can the solutions architect design the API Gateway access control and perform request inspections?Read More →

A company operates a fleet of servers on premises and operates a fleet of Amazon EC2 instances in its organization in AWS Organizations.The company’s AWS accounts contain hundreds of VPCs.The company wants to connect its AWS accounts to its on-premises network.AWS Site-to-Site VPN connections are already established to a single AWS account.The company wants to control which VPCs can communicate with other VPCs.Which combination of steps will achieve this level of control with the LEAST operational effort? (Choose three.)Read More →