SAP-C02 (Page 37)

A company is changing the way that it handles patching of Amazon EC2 instances in its application account.The company currently patches instances over the internet by using a NAT gateway in a VPC in the application account.The company has EC2 instances set up as a patch source repository in a dedicated private VPC in a core account.The company wants to use AWS Systems Manager Patch Manager and the patch source repository in the core account to patch the EC2 instances in the application account.The company must prevent all EC2 instances in the application account from accessing the internet.The EC2 instances in the application account need to access Amazon S3, where the application data is stored.These EC2 instances need connectivity to Systems Manager and to the patch source repository in the private VPC in the core account.Which solution will meet these requirements?Read More →

A company is using AWS to develop and manage its production web application.The application includes an Amazon API Gateway HTTP API that invokes an AWS Lambda function.The Lambda function processes and then stores data in a database.The company wants to implement user authorization for the web application in an integrated way.The company already uses a third-party identity provider that issues OAuth tokens for the company’s other applications.Which solution will meet these requirements?Read More →

A company has multiple AWS accounts that are in an organization in AWS Organizations.The company needs to store AWS account activity and query the data from a central location by using SQL.Which solution will meet these requirements?Read More →

A company needs to optimize the cost of an AWS environment that contains multiple accounts in an organization in AWS Organizations.The company conducted cost optimization activities 3 years ago and purchased Amazon EC2 Standard Reserved Instances that recently expired.The company needs EC2 instances for 3 more years.Additionally, the company has deployed a new serverless workload.Which strategy will provide the company with the MOST cost savings?Read More →

A company in the United States (US) has acquired a company in Europe.Both companies use the AWS Cloud.The US company has built a new application with a microservices architecture.The US company is hosting the application across five VPCs in the us-east-2 Region.The application must be able to access resources in one VPC in the eu-west-1 Region.However, the application must not be able to access any other VPCs.The VPCs in both Regions have no overlapping CIDR ranges.All accounts are already consolidated in one organization in AWS Organizations.Which solution will meet these requirements MOST cost-effectively?Read More →

A company needs to migrate its on-premises database fleet to Amazon RDS.The company is currently using a mixture of Microsoft SQL Server, MySQL, and Oracle databases.Some of the databases have custom schemas and stored procedures.Which combination of steps should the company take for the migration? (Choose two.)Read More →

A company runs a web application on a single Amazon EC2 instance.End users experience slow application performance during times of peak usage, when CPU utilization is consistently more than 95%.A user data script installs required custom packages on the EC2 instance.The process of launching the instance takes several minutes.The company is creating an Auto Scaling group that has mixed instance groups, varied CPUs, and a maximum capacity limit.The Auto Scaling group will use a launch template for various configuration options.The company needs to decrease application latency when new instances are launched during auto scaling.Which solution will meet these requirements?Read More →

A company needs to improve the reliability of its ticketing application.The application runs on an Amazon Elastic Container Service (Amazon ECS) cluster.The company uses Amazon CloudFront to serve the application.A single ECS service of the ECS cluster is the CloudFront distribution’s origin.The application allows only a specific number of active users to enter a ticket purchasing flow.These users are identified by an encrypted attribute in their JSON Web Token (JWT).All other users are redirected to a waiting room module until there is available capacity for purchasing.The application is experiencing high loads.The waiting room module is working as designed, but load on the waiting room is disrupting the applications availability.This disruption is negatively affecting the application’s ticket sale transactions.Which solution will provide the MOST reliability for ticket sale transactions during periods of high load?Read More →

A company has many services running in its on-premises data center.The data center is connected to AWS using AWS Direct Connect (DX) and an IPSec VPN.The service data is sensitive and connectivity cannot traverse the internet.The company wants to expand into a new market segment and begin offering its services to other companies that are using AWS.Which solution will meet these requirements?Read More →

A company hosts an intranet web application on Amazon EC2 instances behind an Application Load Balancer (ALB).Currently, users authenticate to the application against an internal user database.The company needs to authenticate users to the application by using an existing AWS Directory Service for Microsoft Active Directory directory.All users with accounts in the directory must have access to the application.Which solution will meet these requirements?Read More →