SAP-C02 (Page 4)

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC.An AWS Site-to-Site VPN connects the VPC to the company’s on-premises network.The new service must communicate with existing on-premises services.The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone.This DNS zone is wholly hosted on premises and is available only on the company’s private network.A solutions architect must ensure that the new service can resolve hostnames on the company.example domain to integrate with existing services.Which solution meets these requirements?Read More →

A company is expanding.The company plans to separate its resources into hundreds of different AWS accounts in multiple AWS Regions.A solutions architect must recommend a solution that denies access to any operations outside of specifically designated Regions.Which solution will meet these requirements?Read More →

A solutions architect is reviewing a company’s process for taking snapshots of Amazon RDS DB instances.The company takes automatic snapshots every day and retains the snapshots for 7 days.The solutions architect needs to recommend a solution that takes snapshots every 6 hours and retains the snapshots for 30 days.The company uses AWS Organizations to manage all of its AWS accounts.The company needs a consolidated view of the health of the RDS snapshots.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is building a call center by using Amazon Connect.The company’s operations team is defining a disaster recovery (DR) strategy across AWS Regions.The contact center has dozens of contact flows, hundreds of users, and dozens of claimed phone numbers.Which solution will provide DR with the LOWEST RTO?Read More →

A company uses AWS Organizations to manage a multi-account structure.The company has hundreds of AWS accounts and expects the number of accounts to increase.The company is building a new application that uses Docker images.The company will push the Docker images to Amazon Elastic Container Registry (Amazon ECR).Only accounts that are within the company’s organization should have access to the images.The company has a CI/CD process that runs frequently.The company wants to retain all the tagged images.However, the company wants to retain only the five most recent untagged images.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company wants to use AWS to create a business continuity solution in case the company’s main on-premises application fails.The application runs on physical servers that also run other applications.The on-premises application that the company is planning to migrate uses a MySQL database as a data store.All the company’s on-premises applications use operating systems that are compatible with Amazon EC2.Which solution will achieve the company’s goal with the LEAST operational overhead?Read More →

A company ingests and processes streaming market data.The data rate is constant.A nightly process that calculates aggregate statistics takes 4 hours to complete.The statistical analysis is not critical to the business, and data points are processed during the next iteration if a particular run fails.The current architecture uses a pool of Amazon EC2 Reserved Instances with 1-year reservations.These EC2 instances run full time to ingest and store the streaming data in attached Amazon Elastic Block Store (Amazon EBS) volumes.A scheduled script launches EC2 On-Demand Instances each night to perform the nightly processing.The instances access the stored data from NFS shares on the ingestion servers.The script terminates the instances when the processing is complete.The Reserved Instance reservations are expiring.The company needs to determine whether to purchase new reservations or implement a new design.Which solution will meet these requirements MOST cost-effectively?Read More →

A company hosts a blog post application on AWS using Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.The application currently does not use API keys to authorize requests.The API model is as follows:GET /posts/{postId}: to get post detailsGET /users/{userId}: to get user detailsGET /comments/{commentId}: to get comments detailsThe company has noticed users are actively discussing topics in the comments section, and the company wants to increase user engagement by making the comments appear in real time.Which design should be used to reduce comment latency and improve user experience?Read More →

A company is running a workload that consists of thousands of Amazon EC2 instances.The workload is running in a VPC that contains several public subnets and private subnets.The public subnets have a route for 0.0.0.0/0 to an existing internet gateway.The private subnets have a route for 0.0.0.0/0 to an existing NAT gateway.A solutions architect needs to migrate the entire fleet of EC2 instances to use IPv6.The EC2 instances that are in private subnets must not be accessible from the public internet.What should the solutions architect do to meet these requirements?Read More →

A company is creating a REST API to share information with six of its partners based in the United States.The company has created an Amazon API Gateway Regional endpoint.Each of the six partners will access the API once per day to post daily sales figures.After initial deployment, the company observes 1,000 requests per second originating from 500 different IP addresses around the world.The company believes this traffic is originating from a botnet and wants to secure its API while minimizing cost.Which approach should the company take to secure its API?Read More →