SAP-C02 (Page 4)

A company has 10 accounts that are part of an organization in AWS Organizations.AWS Config is configured in each account.All accounts belong to either the Prod OU or the NonProd OU.The company has set up an Amazon EventBridge rule in each AWS account to notify an Amazon Simple Notification Service (Amazon SNS) topic when an Amazon EC2 security group inbound rule is created with 0.0.0.0/0 as the source.The company’s security team is subscribed to the SNS topic.For all accounts in the NonProd OU, the security team needs to remove the ability to create a security group inbound rule that includes 0.0.0.0/0 as the source.Which solution will meet this requirement with the LEAST operational overhead?Read More →

A company hosts a Git repository in an on-premises data center.The company uses webhooks to invoke functionality that runs in the AWS Cloud.The company hosts the webhook logic on a set of Amazon EC2 instances in an Auto Scaling group that the company set as a target for an Application Load Balancer (ALB).The Git server calls the ALB for the configured webhooks.The company wants to move the solution to a serverless architecture.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is planning to migrate 1,000 on-premises servers to AWS.The servers run on several VMware clusters in the company’s data center.As part of the migration plan, the company wants to gather server metrics such as CPU details, RAM usage, operating system information, and running processes.The company then wants to query and analyze the data.Which solution will meet these requirements?Read More →

A company is building a serverless application that runs on an AWS Lambda function that is attached to a VPC.The company needs to integrate the application with a new service from an external provider.The external provider supports only requests that come from public IPv4 addresses that are in an allow list.The company must provide a single public IP address to the external provider before the application can start using the new service.Which solution will give the application the ability to access the new service?Read More →

A company runs an application on AWS.The company curates data from several different sources.The company uses proprietary algorithms to perform data transformations and aggregations.After the company performs ETL processes, the company stores the results in Amazon Redshift tables.The company sells this data to other companies.The company downloads the data as files from the Amazon Redshift tables and transmits the files to several data customers by using FTP.The number of data customers has grown significantly.Management of the data customers has become difficult.The company will use AWS Data Exchange to create a data product that the company can use to share data with customers.The company wants to confirm the identities of the customers before the company shares data.The customers also need access to the most recent data when the company publishes the data.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company’s solutions architect is evaluating an AWS workload that was deployed several years ago.The application tier is stateless and runs on a single large Amazon EC2 instance that was launched from an AMI.The application stores data in a MySQL database that runs on a single EC2 instance.The CPU utilization on the application server EC2 instance often reaches 100% and causes the application to stop responding.The company manually installs patches on the instances.Patching has caused downtime in the past.The company needs to make the application highly available.Which solution will meet these requirements with the LEAST development me?Read More →

A company is launching a new online game on Amazon EC2 instances.The game must be available globally.The company plans to run the game in three AWS Regions us-east-1, eu-west-1, and ap-southeast-1.The game’s leaderboards, player inventory and event status must be available across Regions.A solutions architect must design a solution that will give any Region the ability to scale to handle the load of all Regions.Additionally, users must automatically connect to the Region that provides the least latency.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A solutions architect is determining the DNS strategy for an existing VPC.The VPC is provisioned to use the 10.24.34.0/24 CIDR block.The VPC also uses Amazon Route 53 Resolver for DNS.New requirements mandate that DNS queries must use private hosted zones.Additionally instances that have public IP addresses must receive corresponding public hostnamesWhich solution will meet these requirements to ensure that the domain names are correctly resolved within the VPC?Read More →

A company is building an application on AWS.The application sends logs to an Amazon OpenSearch Service cluster for analysis.All data must be stored within a VPC.Some of the company’s developers work from home.Other developers work from three different company office locations.The developers need to access OpenSearch Service to analyze and visualize logs directly from their local development machines.Which solution will meet these requirements?Read More →

A company is migrating an on-premises application and a MySQL database to AWS.The application processes highly sensitive data, and new data is constantly updated in the database.The data must not be transferred over the internet.The company also must encrypt the data in transit and at rest.The database is 5 TB in size.The company already has created the database schema in an Amazon RDS for MySQL DB instance.The company has set up a 1 Gbps AWS Direct Connect connection to AWS.The company also has set up a public VIF and a private VIF.A solutions architect needs to design a solution that will migrate the data to AWS with the least possible downtime.Which solution will meet these requirements?Read More →