SAP-C02 (Page 38)

A company is building a serverless application that runs on an AWS Lambda function that is attached to a VPC.The company needs to integrate the application with a new service from an external provider.The external provider supports only requests that come from public IPv4 addresses that are in an allow list.The company must provide a single public IP address to the external provider before the application can start using the new service.Which solution will give the application the ability to access the new service?Read More →

A company is planning to migrate 1,000 on-premises servers to AWS.The servers run on several VMware clusters in the company’s data center.As part of the migration plan, the company wants to gather server metrics such as CPU details, RAM usage, operating system information, and running processes.The company then wants to query and analyze the data.Which solution will meet these requirements?Read More →

A company hosts a Git repository in an on-premises data center.The company uses webhooks to invoke functionality that runs in the AWS Cloud.The company hosts the webhook logic on a set of Amazon EC2 instances in an Auto Scaling group that the company set as a target for an Application Load Balancer (ALB).The Git server calls the ALB for the configured webhooks.The company wants to move the solution to a serverless architecture.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has 10 accounts that are part of an organization in AWS Organizations.AWS Config is configured in each account.All accounts belong to either the Prod OU or the NonProd OU.The company has set up an Amazon EventBridge rule in each AWS account to notify an Amazon Simple Notification Service (Amazon SNS) topic when an Amazon EC2 security group inbound rule is created with 0.0.0.0/0 as the source.The company’s security team is subscribed to the SNS topic.For all accounts in the NonProd OU, the security team needs to remove the ability to create a security group inbound rule that includes 0.0.0.0/0 as the source.Which solution will meet this requirement with the LEAST operational overhead?Read More →

A company is using Amazon OpenSearch Service to analyze data.The company loads data into an OpenSearch Service cluster with 10 data nodes from an Amazon S3 bucket that uses S3 Standard storage.The data resides in the cluster for 1 month for read-only analysis.After 1 month, the company deletes the index that contains the data from the cluster.For compliance purposes, the company must retain a copy of all input data.The company is concerned about ongoing costs and asks a solutions architect to recommend a new solution.Which solution will meet these requirements MOST cost-effectively?Read More →

A solutions architect needs to advise a company on how to migrate its on-premises data processing application to the AWS Cloud.Currently, users upload input files through a web portal.The web server then stores the uploaded files on NAS and messages the processing server over a message queue.Each media file can take up to 1 hour to process.The company has determined that the number of media files awaiting processing is significantly higher during business hours, with the number of files rapidly declining after business hours.What is the MOST cost-effective migration recommendation?Read More →

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ТВ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

A company wants to migrate its workloads from on premises to AWS.The workloads run on Linux and Windows.The company has a large on-premises infrastructure that consists of physical machines and VMs that host numerous applications.The company must capture details about the system configuration, system performance, running processes, and network connections of its on-premises workloads.The company also must divide the on-premises applications into groups for AWS migrations.The company needs recommendations for Amazon EC2 instance types so that the company can run its workloads on AWS in the most cost-effective manner.Which combination of steps should a solutions architect take to meet these requirements? (Choose three.)Read More →

A company is using AWS Organizations to manage multiple AWS accounts.For security purposes, the company requires the creation of an Amazon Simple Notification Service (Amazon SNS) topic that enables integration with a third-party alerting system in all the Organizations member accounts.A solutions architect used an AWS CloudFormation template to create the SNS topic and stack sets to automate the deployment of CloudFormation stacks.Trusted access has been enabled in Organizations.What should the solutions architect do to deploy the CloudFormation StackSets in all AWS accounts?Read More →

A company is hosting a three-tier web application in an on-premises environment.Due to a recent surge in traffic that resulted in downtime and a significant financial impact, company management has ordered that the application be moved to AWS.The application is written in .NET and has a dependency on a MySQL database.A solutions architect must design a scalable and highly available solution to meet the demand of 200,000 daily users.Which steps should the solutions architect take to design an appropriate solution?Read More →