SAP-C02 (Page 5)

A company runs an unauthenticated static website (www.example.com) that includes a registration form for users.The website uses Amazon S3 for hosting and uses Amazon CloudFront as the content delivery network with AWS WAF configured.When the registration form is submitted, the website calls an Amazon API Gateway API endpoint that invokes an AWS Lambda function to process the payload and forward the payload to an external API call.During testing, a solutions architect encounters a cross-origin resource sharing (CORS) error.The solutions architect confirms that the CloudFront distribution origin has the Access-Control-Allow-Origin header set to www.example.com.What should the solutions architect do to resolve the error?Read More →

A media storage application uploads user photos to Amazon S3 for processing by AWS Lambda functions.Application state is stored in Amazon DynamoDB tables.Users are reporting that some uploaded photos are not being processed properly.The application developers trace the logs and find that Lambda is experiencing photo processing issues when thousands of users upload photos simultaneously.The issues are the result of Lambda concurrency limits and the performance of DynamoDB when data is saved.Which combination of actions should a solutions architect take to increase the performance and reliability of the application? (Choose two.)Read More →

A company uses AWS Organizations to manage its AWS accounts.The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage.The company also needs recommendations for how to downsize these underutilized instances.Which solution will meet these requirements with the LEAST effort?Read More →

A company has Linux-based Amazon EC2 instances.Users must access the instances by using SSH with EC2 SSH key pairs.Each machine requires a unique EC2 key pair.The company wants to implement a key rotation policy that will, upon request, automatically rotate all the EC2 key pairs and keep the keys in a securely encrypted place.The company will accept less than 1 minute of downtime during key rotation.Which solution will meet these requirements?Read More →

A company is subject to regulatory audits of its financial information.External auditors who use a single AWS account need access to the company’s AWS account.A solutions architect must provide the auditors with secure, read-only access to the company’s AWS account.The solution must comply with AWS security best practices.Which solution will meet these requirements?Read More →

A company has built a high performance computing (HPC) cluster in AWS for a tightly coupled workload that generates a large number of shared files stored in Amazon EFS.The cluster was performing well when the number of Amazon EC2 instances in the cluster was 100.However, when the company increased the cluster size to 1.000 EC2 instances, overall performance was well below expectations.Which collection of design choices should a solutions architect make to achieve the maximum performance from the HPC cluster? (Choose three.)Read More →

A company is building an application that will run on an AWS Lambda function.Hundreds of customers will use the application.The company wants to give each customer a quota of requests for a specific time period.The quotas must match customer usage patterns.Some customers must receive a higher quota for a shorter time period.Which solution will meet these requirements?Read More →

A company runs its application on Amazon EC2 instances and AWS Lambda functions.The EC2 instances experience a continuous and stable load.The Lambda functions experience a varied and unpredictable load.The application includes a caching layer that uses an Amazon MemoryDB for Redis cluster.A solutions architect must recommend a solution to minimize the company’s overall monthly costs.Which solution will meet these requirements?Read More →

An online gaming company needs to optimize the cost of its workloads on AWS.The company uses a dedicated account to host the production environment for its online gaming application and an analytics application.Amazon EC2 instances host the gaming application and must always be available.The EC2 instances run all year.The analytics application uses data that is stored in Amazon S3.The analytics application can be interrupted and resumed without issue.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is using AWS Organizations to manage multiple accounts.Due to regulatory requirements, the company wants to restrict specific member accounts to certain AWS Regions, where they are permitted to deploy resources.The resources in the accounts must be tagged, enforced based on a group standard, and centrally managed with minimal configuration.What should a solutions architect do to meet these requirements?Read More →