SAP-C02 (Page 41)

A company has application services that have been containerized and deployed on multiple Amazon EC2 instances with public IPs.An Apache Kafka cluster has been deployed to the EC2 instances.A PostgreSQL database has been migrated to Amazon RDS for PostgreSQL.The company expects a significant increase of orders on its platform when a new version of its flagship product is released.What changes to the current architecture will reduce operational overhead and support the product release?Read More →

A large company is migrating its entire IT portfolio to AWS.Each business unit in the company has a standalone AWS account that supports both development and test environments.New accounts to support production workloads will be needed soon.The finance department requires a centralized method for payment but must maintain visibility into each group’s spending to allocate costs.The security team requires a centralized mechanism to control IAM usage in all the company’s accounts.What combination of the following options meets the company’s needs with the LEAST effort? (Choose two.)Read More →

A global company has a mobile app that displays ticket barcodes.Customers use the tickets on the mobile app to attend live events.Event scanners read the ticket barcodes and call a backend API to validate the barcode data against data in a database.After the barcode is scanned, the backend logic writes to the database’s single table to mark the barcode as used.The company needs to deploy the app on AWS with a DNS name of api.example.com.The company will host the database in three AWS Regions around the world.Which solution will meet these requirements with the LOWEST latency?Read More →

A company is deploying a new application on AWS.The application consists of an Amazon Elastic Kubernetes Service (Amazon EKS) cluster and an Amazon Elastic Container Registry (Amazon ECR) repository.The EKS cluster has an AWS managed node group.The company’s security guidelines state that all resources on AWS must be continuously scanned for security vulnerabilities.Which solution will meet this requirement with the LEAST operational overhead?Read More →

A company needs to monitor a growing number of Amazon S3 buckets across two AWS Regions.The company also needs to track the percentage of objects that are encrypted in Amazon S3.The company needs a dashboard to display this information for internal compliance teams.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has a project that is launching Amazon EC2 instances that are larger than required.The project’s account cannot be part of the company’s organization in AWS Organizations due to policy restrictions to keep this activity outside of corporate IT.The company wants to allow only the launch of t3.small EC2 instances by developers in the project’s account.These EC2 instances must be restricted to the us-east-2 Region.What should a solutions architect do to meet these requirements?Read More →

A company needs to migrate its customer transactions database from on premises to AWS.The database resides on an Oracle DB instance that runs on a Linux server.According to a new security requirement, the company must rotate the database password each year.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has five development teams that have each created five AWS accounts to develop and host applications.To track spending, the development teams log in to each account every month, record the current cost from the AWS Billing and Cost Management console, and provide the information to the company’s finance team.The company has strict compliance requirements and needs to ensure that resources are created only in AWS Regions in the United States.However, some resources have been created in other Regions.A solutions architect needs to implement a solution that gives the finance team the ability to track and consolidate expenditures for all the accounts.The solution also must ensure that the company can create resources only in Regions in the United States.Which combination of steps will meet these requirements in the MOST operationally efficient way? (Choose three.)Read More →

A solutions architect is investigating an issue in which a company cannot establish new sessions in Amazon Workspaces.An initial analysis indicates that the issue involves user profiles.The Amazon Workspaces environment is configured to use Amazon FSx for Windows File Server as the profile share storage.The FSx for Windows File Server file system is configured with 10 TB of storage.The solutions architect discovers that the file system has reached Its maximum capacity.The solutions architect must ensure that users can regain access.The solution also must prevent the problem from occurring again.Which solution will meet these requirements?Read More →

A company runs its sales reporting application in an AWS Region in the United States.The application uses an Amazon API Gateway Regional API and AWS Lambda functions to generate on-demand reports from data in an Amazon RDS for MySQL database.The frontend of the application is hosted on Amazon S3 and is accessed by users through an Amazon CloudFront distribution.The company is using Amazon Route 53 as the DNS service for the domain.Route 53 is configured with a simple routing policy to route traffic to the API Gateway API.In the next 6 months, the company plans to expand operations to Europe.More than 90% of the database traffic is read-only traffic.The company has already deployed an API Gateway API and Lambda functions in the new Region.A solutions architect must design a solution that minimizes latency for users who download reports.Which solution will meet these requirements?Read More →