SAP-C02 (Page 39)

A company is preparing to deploy an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for a workload.The company expects the cluster to support an unpredictable number of stateless pods.Many of the pods will be created during a short time period as the workload automatically scales the number of replicas that the workload uses.Which solution will MAXIMIZE node resilience?Read More →

A company is deploying AWS Lambda functions that access an Amazon RDS for PostgreSQL database.The company needs to launch the Lambda functions in a QA environment and in a production environment.The company must not expose credentials within application code and must rotate passwords automatically.Which solution will meet these requirements?Read More →

A company is deploying a third-party web application on AWS.The application is packaged as a Docker image.The company has deployed the Docker image as an AWS Fargate service in Amazon Elastic Container Service (Amazon ECS).An Application Load Balancer (ALB) directs traffic to the application.The company needs to give only a specific list of users the ability to access the application from the internet.The company cannot change the application and cannot integrate the application with an identity provider.All users must be authenticated through multi-factor authentication (MFA).Which solution will meet these requirements?Read More →

A solutions architect is preparing to deploy a new security tool into several previously unused AWS Regions.The solutions architect will deploy the tool by using an AWS CloudFormation stack set.The stack set’s template contains an IAM role that has a custom name.Upon creation of the stack set, no stack instances are created successfully.What should the solutions architect do to deploy the stacks successfully?Read More →

A company has an application that uses an Amazon Aurora PostgreSQL DB cluster for the application’s database.The DB cluster contains one small primary instance and three larger replica instances.The application runs on an AWS Lambda function.The application makes many short-lived connections to the database’s replica instances to perform read-only operations.During periods of high traffic, the application becomes unreliable and the database reports that too many connections are being established.The frequency of high-traffic periods is unpredictable.Which solution will improve the reliability of the application?Read More →

A startup company recently migrated a large ecommerce website to AWS.The website has experienced a 70% increase in sales.Software engineers are using a private GitHub repository to manage code.The DevOps team is using Jenkins for builds and unit testing.The engineers need to receive notifications for bad builds and zero downtime during deployments.The engineers also need to ensure any changes to production are seamless for users and can be rolled back in the event of a major issue.The software engineers have decided to use AWS CodePipeline to manage their build and deployment process.Which solution will meet these requirements?Read More →

A software as a service (SaaS) company has developed a multi-tenant environment.The company uses Amazon DynamoDB tables that the tenants share for the storage layer.The company uses AWS Lambda functions for the application services.The company wants to offer a tiered subscription model that is based on resource consumption by each tenant.Each tenant is identified by a unique tenant ID that is sent as part of each request to the Lambda functions.The company has created an AWS Cost and Usage Report (AWS CUR) in an AWS account.The company wants to allocate the DynamoDB costs to each tenant to match that tenant’s resource consumption.Which solution will provide a granular view of the DynamoDB cost for each tenant with the LEAST operational effort?Read More →

A company needs to improve the security of its web-based application on AWS.The application uses Amazon CloudFront with two custom origins.The first custom origin routes requests to an Amazon API Gateway HTTP API.The second custom origin routes traffic to an Application Load Balancer (ALB).The application integrates with an OpenID Connect (OIDC) identity provider (IdP) for user management.A security audit shows that a JSON Web Token (JWT) authorizer provides access to the API.The security audit also shows that the ALB accepts requests from unauthenticated users.A solutions architect must design a solution to ensure that all backend services respond to only authenticated users.Which solution will meet this requirement?Read More →

A company has a web application that uses Amazon API Gateway.AWS Lambda, and Amazon DynamoDB.A recent marketing campaign has increased demand.Monitoring software reports that many requests have significantly longer response times than before the marketing campaign.A solutions architect enabled Amazon CloudWatch Logs for API Gateway and noticed that errors are occurring on 20% of the requests.In CloudWatch, the Lambda function Throttles metric represents 1% of the requests and the Errors metric represents 10% of the requests.Application logs indicate that, when errors occur, there is a call to DynamoDB.What change should the solutions architect make to improve the current response times as the web application becomes more popular?Read More →

A company has developed a new release of a popular video game and wants to make it available for public download.The new release package is approximately 5 GB in size.The company provides downloads for existing releases from a Linux-based, publicly facing FTP site hosted in an on-premises data center.The company expects the new release will be downloaded by users worldwide.The company wants a solution that provides improved download performance and low transfer costs, regardless of a user’s location.Read More →