SAP-C02 (Page 47)

A company has migrated a legacy application to the AWS Cloud.The application runs on three Amazon EC2 instances that are spread across three Availability Zones.One EC2 instance is in each Availability Zone.The EC2 instances are running in three private subnets of the VPC and are set up as targets for an Application Load Balancer (ALB) that is associated with three public subnets.The application needs to communicate with on-premises systems.Only traffic from IP addresses in the company’s IP address range are allowed to access the on-premises systems.The company’s security team is bringing only one IP address from its internal IP address range to the cloud.The company has added this IP address to the allow list for the company firewall.The company also has created an Elastic IP address for this IP address.A solutions architect needs to create a solution that gives the application the ability to communicate with the on-premises systems.The solution also must be able to mitigate failures automatically.Which solution will meet these requirements?Read More →

A company wants to migrate to AWS.The company is running thousands of VMs in a VMware ESXi environment.The company has no configuration management database and has little knowledge about the utilization of the VMware portfolio.A solutions architect must provide the company with an accurate inventory so that the company can plan for a cost-effective migration.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is migrating an application to AWS.It wants to use fully managed services as much as possible during the migration.The company needs to store large important documents within the application with the following requirements:1.The data must be highly durable and available2.The data must always be encrypted at rest and in transit3.The encryption key must be managed by the company and rotated periodicallyWhich of the following solutions should the solutions architect recommend?Read More →

A company is developing a new serverless API by using Amazon API Gateway and AWS Lambda.The company integrated the Lambda functions with API Gateway to use several shared libraries and custom classes.A solutions architect needs to simplify the deployment of the solution and optimize for code reuse.Which solution will meet these requirements?Read More →

A company is planning a migration from an on-premises data center to the AWS Cloud.The company plans to use multiple AWS accounts that are managed in an organization in AWS Organizations.The company will create a small number of accounts initially and will add accounts as needed.A solutions architect must design a solution that turns on AWS CloudTrail in all AWS accounts.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts.The company’s information security policy states that the S3 bucket must not be accessed over the public internet and that each application should have the minimum permissions necessary to function.To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application.Which combination of steps should the solutions architect take to implement this solution? (Choose two.)Read More →

A company creates an Amazon API Gateway API and shares the API with an external development team.The API uses AWS Lambda functions and is deployed to a stage that is named Production.The external development team is the sole consumer of the API.The API experiences sudden increases of usage at specific times, leading to concerns about increased costs.The company needs to limit cost and usage without reworking the Lambda functions.Which solution will meet these requirements MOST cost-effectively?Read More →

A company uses a mobile app on AWS to run online contests.The company selects a winner at random at the end of each contest.The contests run for variable lengths of time.The company does not need to retain any data from a contest after the contest is finished.The company uses custom code that is hosted on Amazon EC2 instances to process the contest data and select a winner.The EC2 instances run behind an Application Load Balancer and store contest entries on Amazon RDS DB instances.The company must design a new architecture to reduce the cost of running the contests.Which solution will meet these requirements MOST cost-effectively?Read More →

A company provides a centralized Amazon EC2 application hosted in a single shared VPC.The centralized application must be accessible from client applications running in the VPCs of other business units.The centralized application front end is configured with a Network Load Balancer (NLB) for scalability.Up to 10 business unit VPCs will need to be connected to the shared VPC.Some of the business unit VPC CIDR blocks overlap with the shared VPC, and some overlap with each other Network connectivity to the centralized application in the shared VPC should be allowed from authorized business unit VPCs only.Which network configuration should a solutions architect use to provide connectivity from the client applications in the business unit VPCs to the centralized application in the shared VPC?Read More →

A company is migrating its blog platform to AWS.The company’s on-premises servers connect to AWS through an AWS Site-to-Site VPN connection.The blog content is updated several times a day by multiple authors and is served from a file share on a network-attached storage (NAS) server.The company needs to migrate the blog platform without delaying the content updates.The company has deployed Amazon EC2 instances across multiple Availability Zones to run the blog platform behind an Application Load Balancer.The company also needs to move 200 TB of archival data from its on-premises servers to Amazon S3 as soon as possible.Which combination of stops will meet these requirements? (Choose two.)Read More →