By:
On:
In: SOA-C01
With: 0 Comments

A company is hosting a website on an Amazon EC2 instance that runs in a public subnet inside a VPC.The company uses Amazon CloudWatch Logs for web server log analysis.A SysOps administrator has installed and configured the CloudWatch Logs agent on the EC2 instance and has confirmed that the agent is running.However, logs are not showing up in CloudWatch Logs.Which solution will resolve this issue?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage.The application tier is hosted on Amazon EC2 instances.The company’s IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days.What should a solutions architect do to meet this requirement with the LEAST operational effort?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A company has an on-premises Microsoft SQL Server database that writes a nightly 200 GB export to a local drive.The company wants to move the backups to more robust cloud storage on Amazon S3.The company has set up a 10 Gbps AWS Direct Connect connection between the on-premises data center and AWS.Which solution meets these requirements MOST cost-effectively?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company needs to provide its employees with secure access to confidential and sensitive files.The company wants to ensure that the files can be accessed only by authorized users.The files must be downloaded securely to the employees’ devices.The files are stored in an on-premises Windows file server.However, due to an increase in remote usage, the file server is running out of capacity.Which solution will meet these requirements?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A company has a large number of AWS accounts in an organization in AWS Organizations.A different business group owns each account.All the AWS accounts are bound by legal compliance requirements that restrict all operations outside the eu-west-2 Region.The company’s security team has mandated the use of AWS Systems Manager Session Manager across all AWS accounts.Which solution should a solutions architect recommend to meet these requirements?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company has applications hosted on Amazon EC2 instances with IPv6 addresses.The applications must initiate communications with other external applications using the internet.However, the company’s security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A startup company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI.The company’s engineers rely heavily on SSH access to the instances for troubleshooting.The company’s existing architecture includes the following:✑ A VPC with private and public subnets, and a NAT gateway✑ Site-to-Site VPN for connectivity with the on-premises environment✑ EC2 security groups with direct SSH access from the on-premises environmentThe company needs to increase security controls around SSH access and provide auditing of commands run by the engineers.Which strategy should a solutions architect use?Read More →