SAP-C02 (Page 38)

A company that has multiple business units is using AWS Organizations with all features enabled.The company has implemented an account structure in which each business unit has its own AWS account.Administrators in each AWS account need to view detailed cost and utilization data for their account by using Amazon Athena.Each business unit can have access to only its own cost and utilization data.The IAM policies that govern the ability to set up AWS Cost and Usage Reports are in place.A central Cost and Usage Report that contains all data for the organization is already available in an Amazon S3 bucket.Which solution will meet these requirements with the LEAST operational complexity?Read More →

A company used AWS CloudFormation to create all new infrastructure in its AWS member accounts.The resources rarely change and are properly sized for the expected load.The monthly AWS bill is consistent.Occasionally, a developer creates a new resource for testing and forgets to remove the resource when the test is complete.Most of these tests last a few days before the resources are no longer needed.The company wants to automate the process of finding unused resources.A solutions architect needs to design a solution that determines whether the cost in the AWS bill is increasing.The solution must help identify resources that cause an increase in cost and must automatically notify the company’s operations team.Which solution will meet these requirements?Read More →

A company has an on-premises data center and is using Kubernetes to develop a new solution on AWS.The company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters for its development and test environments.The EKS control plane and data plane for production workloads must reside on premises.The company needs an AWS managed solution for Kubernetes management.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A flood monitoring agency has deployed more than 10,000 water-level monitoring sensors.Sensors send continuous data updates, and each update is less than 1 MB in size.The agency has a fleet of on-premises application servers.These servers receive updates from the sensors, convert the raw data into a human readable format, and write the results to an on-premises relational database server.Data analysts then use simple SQL queries to monitor the data.The agency wants to increase overall application availability and reduce the effort that is required to perform maintenance tasks.These maintenance tasks, which include updates and patches to the application servers, cause downtime.While an application server is down, data is lost from sensors because the remaining servers cannot handle the entire workload.The agency wants a solution that optimizes operational overhead and costs.A solutions architect recommends the use of AWS IoT Core to collect the sensor data.What else should the solutions architect recommend to meet these requirements?Read More →

A software as a service (SaaS) company provides a media software solution to customers.The solution is hosted on 50 VPCs across various AWS Regions and AWS accounts.One of the VPCs is designated as a management VPC.The compute resources in the VPCs work independently.The company has developed a new feature that requires all 50 VPCs to be able to communicate with each other.The new feature also requires one-way access from each customer’s VPC to the company’s management VPC.The management VPC hosts a compute resource that validates licenses for the media software solution.The number of VPCs that the company will use to host the solution will continue to increase as the solution grows.Which combination of steps will provide the required VPC connectivity with the LEAST operational overhead? (Choose two.)Read More →

A company is running its solution on AWS in a manually created VPC.The company is using AWS CloudFormation to provision other parts of the infrastructure.According to a new requirement, the company must manage all infrastructure in an automatic way.What should the company do to meet this new requirement with the LEAST effort?Read More →

A company is planning to migrate an application to AWS.The application runs as a Docker container and uses an NFS version 4 file share.A solutions architect must design a secure and scalable containerized solution that does not require provisioning or management of the underlying infrastructure.Which solution will meet these requirements?Read More →

A company is using AWS Control Tower to manage AWS accounts in an organization in AWS Organizations.The company has an OU that contains accounts.The company must prevent any new or existing Amazon EC2 instances in the OU’s accounts from gaining a public IP address.Which solution will meet these requirements?Read More →

A company has a website that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are in an Auto Scaling group.The ALB is associated with an AWS WAF web ACL.The website often encounters attacks in the application layer.The attacks produce sudden and significant increases in traffic on the application server.The access logs show that each attack originates from different IP addresses.A solutions architect needs to implement a solution to mitigate these attacks.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company runs a web application on AWS.The web application delivers static content from an Amazon S3 bucket that is behind an Amazon CloudFront distribution.The application serves dynamic content by using an Application Load Balancer (ALB) that distributes requests to a fleet of Amazon EC2 instances in Auto Scaling groups.The application uses a domain name setup in Amazon Route 53.Some users reported occasional issues when the users attempted to access the website during peak hours.An operations team found that the ALB sometimes returned HTTP 503 Service Unavailable errors.The company wants to display a custom error message page when these errors occur.The page should be displayed immediately for this error code.Which solution will meet these requirements with the LEAST operational overhead?Read More →