SAP-C02 (Page 5)

A financial company needs to create a separate AWS account for a new digital wallet application.The company uses AWS Organizations to manage its accounts.A solutions architect uses the IAM user Support1 from the management account to create a new member account with [email protected] as the email address.What should the solutions architect do to create IAM users in the new member account?Read More →

A company is building an image service on the web that will allow users to upload and search random photos.At peak usage, up to 10,000 users worldwide will upload their images.The will then overlay text on the uploaded images, which will then be published on the company website.Which design should a solutions architect implement?Read More →

A company needs to audit the security posture of a newly acquired AWS account.The company’s data security team requires a notification only when an Amazon S3 bucket becomes publicly exposed.The company has already established an Amazon Simple Notification Service (Amazon SNS) topic that has the data security team’s email address subscribed.Which solution will meet these requirements?Read More →

An education company is running a web application used by college students around the world.The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB).A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application’s authentication service.All the failed login attempts originate from about 500 different IP addresses that change each week.A solutions architect must prevent the failed login attempts from overwhelming the authentication service.Which solution meets these requirements with the MOST operational efficiency?Read More →

A company operates an on-premises software-as-a-service (SaaS) solution that ingests several files daily.The company provides multiple public SFTP endpoints to its customers to facilitate the file transfers.The customers add the SFTP endpoint IP addresses to their firewall allow list for outbound traffic.Changes to the SFTP endpoint IP addresses are not permitted.The company wants to migrate the SaaS solution to AWS and decrease the operational overhead of the file transfer service.Which solution meets these requirements?Read More →

A company runs an application in an on-premises data center.The application gives users the ability to upload media files.The files persist in a file server.The web application has many users.The application server is overutilized, which causes data uploads to fail occasionally.The company frequently adds new storage to the file server.The company wants to resolve these challenges by migrating the application to AWS.Users from across the United States and Canada access the application.Only authenticated users should have the ability to access the application to upload files.The company will consider a solution that refactors the application, and the company needs to accelerate application development.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are part of an Auto Scaling group.The application has unpredictable workloads and frequently scales out and in.The company’s development team wants to analyze application logs to find ways to improve the application’s performance.However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?Read More →

A company is developing a new on-demand video application that is based on microservices.The application will have 5 million users at launch and will have 30 million users after 6 months.The company has deployed the application on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.The company developed the application by using ECS services that use the HTTPS protocol.A solutions architect needs to implement updates to the application by using blue/green deployments.The solution must distribute traffic to each ECS service through a load balancer.The application must automatically adjust the number of tasks in response to an Amazon CloudWatch alarm.Which solution will meet these requirements?Read More →

A company’s public API runs as tasks on Amazon Elastic Container Service (Amazon ECS).The tasks run on AWS Fargate behind an Application Load Balancer (ALB) and are configured with Service Auto Scaling for the tasks based on CPU utilization.This service has been running well for several months.Recently, API performance slowed down and made the application unusable.The company discovered that a significant number of SQL injection attacks had occurred against the API and that the API service had scaled to its maximum amount.A solutions architect needs to implement a solution that prevents SQL injection attacks from reaching the ECS API service.The solution must allow legitimate traffic through and must maximize operational efficiency.Which solution meets these requirements?Read More →

A solutions architect is creating an application that stores objects in an Amazon S3 bucket.The solutions architect must deploy the application in two AWS Regions that will be used simultaneously.The objects in the two S3 buckets must remain synchronized with each other.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)Read More →