By:
On:
In: SAP-C01
With: 0 Comments

A company had a third-party audit of its AWS environment.The auditor identified secrets in developer documentation and found secrets that were hardcoded into AWS CloudFormation templates throughout the environment.The auditor also identified security groups that allowed inbound traffic from the internet and outbound traffic to all destinations on the internet.A solutions architect must design a solution that will encrypt all secrets and rotate the secrets every 90 days.Additionally, the solutions architect must configure the security groups to prevent resources from being accessible from the internet.Which solution will meet these requirements?Read More →

By:
On:
In: SOA-C01
With: 0 Comments

A company runs an image-processing application on a serverless infrastructure.Each processing job runs in a single AWS Lambda execution.A sysops administrator is tasked with ensuring there is enough capacity to run 500 simultaneous jobs even if other Lambda functions are being run for other applications.The administrator has already increased service limits within the Region.Which action should be taken?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A solutions architect is working on optimizing a legacy document management application running on Microsoft Windows Server in an on-premises data center.The application stores a large number of files on a network file share.The chief information officer wants to reduce the on-premises data center footprint and minimize storage costs by moving on-premises storage to AWS.What should the solutions architect do to meet these requirements?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are part of an Auto Scaling group.The application has unpredictable workloads and frequently scales out and in.The company’s development team wants to analyze application logs to find ways to improve the application’s performance.However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A solutions architect is designing a hybrid application using the AWS cloud.The network between the on-premises data center and AWS will use an AWS DirectConnect (DX) connection.The application connectivity between AWS and the on-premises data center must be highly resilient.Which DX configuration should be implemented to meet these requirements?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A company is using IoT devices on its manufacturing equipment.Data from the devices travels to the AWS Cloud through a connection to AWS IoT Core.An Amazon Kinesis data stream sends the data from AWS IoT Core to the company’s processing application.The processing application stores data in Amazon S3.A new requirement states that the company also must send the raw data to a third-party system by using an HTTP API.Which solution will meet these requirements with the LEAST amount of development work?Read More →

By:
On:
In: SOA-C01
With: 0 Comments

An Application team has asked a SysOps Administrator to provision an additional environment for an application in four additional regions.The application is running on more than 100 instances in us-east-1, using fully baked AMIs.An AWS CloudFormation template has been created to deploy resources in us-east-1.What must the SysOps Administrator do to provision the application quickly?Read More →

By:
On:
In: SAA-C02
With: 0 Comments

A company runs an application on Amazon EC2 instances.The application is deployed in private subnets in three Availability Zones of the us-east-1 Region.The instances must be able to connect to the internet to download files.The company wants a design that is highly available across the Region.Which solution should be implemented to ensure that there are no disruptions to internet connectivity?Read More →

By:
On:
In: SAP-C01
With: 0 Comments

A large company has many business units.Each business unit has multiple AWS accounts for different purposes.The CIO of the company sees that each business unit has data that would be useful to share with other parts of the company.In total, there are about 10 PB of data that needs to be shared with users in1,000 AWS accounts.The data is proprietary, so some of it should only be available to users with specific job types.Some of the data is used for throughput of intensive workloads, such as simulations.The number of accounts changes frequently because of new initiatives, acquisitions, and divestitures.A Solutions Architect has been asked to design a system that will allow for sharing data for use in AWS with all of the employees in the company.Which approach will allow for secure data sharing in scalable way?Read More →