Amazon SAP-C02 Question Answers

Question # 171

A company has more than 10.000 sensors that send data to an on-premises Apache Kafka server by using the Message Queuing Telemetry Transport (MQTT) protocol. The onpremises Kafka server transforms the data and then stores the results as objects in an Amazon S3 bucket. Recently, the Kafka server crashed. The company lost sensor data while the server was being restored. A solutions architect must create a new design on AWS that is highly available and scalable to prevent a similar occurrence. Which solution will meet these requirements? 

A. Launch two Amazon EC2 instances to host the Kafka server in an active/standbyconfiguration across two Availability Zones. Create a domain name in Amazon Route 53.Create a Route 53 failover policy. Route the sensors to send the data to the domain name.
B. Migrate the on-premises Kafka server to Amazon Managed Streaming for Apache Kafka(Amazon MSK). Create a Network Load Balancer (NLB) that points to the Amazon MSKbroker Enable NL8 health checks. Route the sensors to send the data to the NLB.
C. Deploy AWS loT Core, and connect it to an Amazon Kinesis Data Firehose deliverystream. Use an AWS Lambda function to handle data transformation. Route the sensors tosend the data to AWS loT Core.
D. Deploy AWS loT Core, and launch an Amazon EC2 instance to host the Kafka server.Configure AWS loT Core to send the data to the EC2 instance. Route the sensors to sendthe data to AWS loT Core.

Show / Hide Answer

---

Question # 172

A solutions architect has launched multiple Amazon EC2 instances in a placement group within a single Availability Zone. Because of additional load on the system, the solutions architect attempts to add new instances to the placement group. However, the solutions architect receives an insufficient capacity error. What should the solutions architect do to troubleshoot this issue? 

A. Use a spread placement group. Set a minimum of eight instances for each AvailabilityZone.
B. Stop and start all the instances in the placement group. Try the launch again.
C. Create a new placement group. Merge the new placement group with the originalplacement group.
D. Launch the additional instances as Dedicated Hosts in the placement groups.

Show / Hide Answer

---

Question # 173

A company hosts an application on AWS. The application reads and writes objects that are stored in a single Amazon S3 bucket. The company must modify the application to deploy the application in two AWS Regions. Which solution will meet these requirements with the LEAST operational overhead? 

A. Set up an Amazon CloudFront distribution with the S3 bucket as an origin. Deploy theapplication to a second Region Modify the application to use the CloudFront distribution.Use AWS Global Accelerator to access the data in the S3 bucket.
B. Create a new S3 bucket in a second Region. Set up bidirectional S3 Cross-RegionReplication (CRR) between the original S3 bucket and the new S3 bucket. Configure an S3Multi-Region Access Point that uses both S3 buckets. Deploy a modified application to bothRegions.
C. Create a new S3 bucket in a second Region Deploy the application in the secondRegion. Configure the application to use the new S3 bucket. Set up S3 Cross-RegionReplication (CRR) from the original S3 bucket to the new S3 bucket.
D. Set up an S3 gateway endpoint with the S3 bucket as an origin. Deploy the applicationto a second Region. Modify the application to use the new S3 gateway endpoint. Use S3Intelligent-Tiering on the S3 bucket.

Show / Hide Answer

---

Question # 174

A company is migrating an application to the AWS Cloud. The application runs in an onpremises data center and writes thousands of images into a mounted NFS file system each night. After the company migrates the application, the company will host the application on an Amazon EC2 instance with a mounted Amazon Elastic File System (Amazon EFS) file system. The company has established an AWS Direct Connect connection to AWS. Before the migration cutover, a solutions architect must build a process that will replicate the newly created on-premises images to the EFS file system. What is the MOST operationally efficient way to replicate the images? 

A. Configure a periodic process to run the aws s3 sync command from the on-premises file system to Amazon S3. Configure an AWS Lambda function to process event notificationsfrom Amazon S3 and copy the images from Amazon S3 to the EFS file system.
B. Deploy an AWS Storage Gateway file gateway with an NFS mount point. Mount the filegateway file system on the on-premises server. Configure a process to periodically copythe images to the mount point.
C. Deploy an AWS DataSync agent to an on-premises server that has access to the NFSfile system. Send data over the Direct Connect connection to an S3 bucket by using publicVIF. Configure an AWS Lambda function to process event notifications from Amazon S3and copy the images from Amazon S3 to the EFS file system.
D. Deploy an AWS DataSync agent to an on-premises server that has access to the NFSfile system. Send data over the Direct Connect connection to an AWS PrivateLink int

Show / Hide Answer

---

Question # 175

A company’s solutions architect is evaluating an AWS workload that was deployed several years ago. The application tier is stateless and runs on a single large Amazon EC2 instance that was launched from an AMI. The application stores data in a MySOL database that runs on a single EC2 instance. The CPU utilization on the application server EC2 instance often reaches 100% and causes the application to stop responding. The company manually installs patches on the instances. Patching has caused downtime in the past. The company needs to make the application highly available. Which solution will meet these requirements with the LEAST development time? 

A. Move the application tier to AWS Lambda functions in the existing VPC. Create anApplication Load Balancer to distribute traffic across the Lambda functbns. Use AmazonGuardDuty to scan the Lambda functions. Migrate the database to Amazon DocumentDB(with MongoDB compatibility).
B. Change the EC2 instance type to a smaller Graviton powered instance type. use theexisting AMI to create a launch template for an Auto Scaling group. Create an ApplicationLoad Balancer to distribute traffic across the instances in the Auto Scaling group. Set theAuto Scaling group to scale based on CPU utilization. Migrate the database to AmazonDynamoDB.
C. Move the application tier to containers by using Docker. Run the containers on AmazonElastic Container Service (Amazon ECS) with EC2 instances. Create an Application LoadBalancer to distribute traffic across the ECS cluster Configure the ECS cluster to scalebased on CPU utilization. Migrate the database to Amazon Neptune.
D. Create a new AMI that is configured with AWS Systems Manager Agent (SSM Agent).Use the new AMI to create a launch template for an Auto Scaling group. Use smallerinstances in the Auto Scaling group. Create an Application Load Balancer to distributetraffic across the instances in the Auto Scaling group. Set the Auto Scaling group to scalebased on CPU utilization. Migrate the database to Amazon Aurora MySQL.

Show / Hide Answer

---

Question # 176

An environmental company is deploying sensors in major cities throughout a country to measure air quality The sensors connect to AWS loT Core to ingest timesheets data readings. The company stores the data in Amazon DynamoDB For business continuity the company must have the ability to ingest and store data in two AWS Regions Which solution will meet these requirements? 

A. Create an Amazon Route 53 alias failover routing policy with values for AWS loT Coredata endpoints in both Regions Migrate data to Amazon Aurora global tables
B. Create a domain configuration for AWS loT Core in each Region Create an AmazonRoute 53 latency-based routing policy Use AWS loT Core data endpoints in both Regionsas values Migrate the data to Amazon MemoryDB for Radis and configure Cross-Regionreplication
C. Create a domain configuration for AWS loT Core in each. Region Create an AmazonRoute 53 health check that evaluates domain configuration health Create a failover routingpolicy with values for the domain name from the AWS loT Core domain configurationsUpdate the DynamoDB table to a global table
D. Create an Amazon Route 53 latency-based routing policy. Use AWS loT Core dataendpoints in both Regions as values. Configure DynamoDB streams and Cross-Regiondata replication

Show / Hide Answer

---

Question # 177

A company has AWS accounts that are in an organization in AWS Organizations. The company wants to track Amazon EC2 usage as a metric. The company's architecture team must receive a daily alert if the EC2 usage is more than 10% higher than the average EC2 usage from the last 30 days. Which solution will meet these requirements? 

A. Configure AWS Budgets in the organization's management account. Specify a usagetype of EC2 running hours. Specify a daily period. Set the budget amount to be 10% morethan the reported average usage for the last 30 days from AWS Cost Explorer. Configurean alert to notify the architecture team if the usage threshold is met.
B. Configure AWS Cost Anomaly Detection in the organization's management account.Configure a monitor type of AWS Service. Apply a filter of Amazon EC2. Configure an alertsubscription to notify the architecture team if the usage is 10% more than the averageusage for the last 30 days.
C. Enable AWS Trusted Advisor in the organization's management account. Configure acost optimization advisory alert to notify the architecture team if the EC2 usage is 10%more than the reported average usage for the last 30 days.
D. Configure Amazon Detective in the organization's management account. Configure anEC2 usage anomaly alert to notify the architecture team if Detective identifies a usageanomaly of more than 10%.

Show / Hide Answer

---

Question # 178

A company has implemented an ordering system using an event-driven architecture. During initial testing, the system stopped processing orders. Further log analysis revealed that one order message in an Amazon Simple Queue Service (Amazon SQS) standard queue was causing an error on the backend and blocking all subsequent order messages The visibility timeout of the queue is set to 30 seconds, and the backend processing timeout is set to 10 seconds. A solutions architect needs to analyze faulty order messages and ensure that the system continues to process subsequent messages. Which step should the solutions architect take to meet these requirements? 

A. Increase the backend processing timeout to 30 seconds to match the visibility timeout.
B. Reduce the visibility timeout of the queue to automatically remove the faulty message.
C. Configure a new SQS FIFO queue as a dead-letter queue to isolate the faultymessages.
D. Configure a new SQS standard queue as a dead-letter queue to isolate the faultymessages.

Show / Hide Answer

---

Question # 179

A company is using AWS Control Tower to manage AWS accounts in an organization in AWS Organizations. The company has an OU that contains accounts. The company must prevent any new or existing Amazon EC2 instances in the OUs accounts from gaining a public IP address. Which solution will meet these requirements? 

A. Configure all instances in each account in the OU to use AWS Systems Manager. Use aSystems Manager Automation runbook to prevent public IP addresses from being attachedto the instances.
B. Implement the AWS Control Tower proactive control to check whether instances in theOU's accounts have a public IP address. Set the AssociatePubIicIpAddress property toFalse. Attach the proactive control to the OU.
C. Create an SCP that prevents the launch of instances that have a public IP address.Additionally, configure the SCP to prevent the attachment of a public IP address to existinginstances. Attach the SCP to the OU.
D. Create an AWS Config custom rule that detects instances that have a public IP address.Configure a remediation action that uses an AWS Lambda function to detach the public IPaddresses from the instances.

Show / Hide Answer

---

Question # 180

A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks. The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations. The SaaS platform uses many AWS resources globally. For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store. Which solution will meet these requirements with the LEAST operational overhead? 

A. Create a new AWS CloudTrail trail. Use an existing Amazon S3 bucket in theorganization's management account to store the logs. Deploy the trail to all AWS Regions.Enable MFA delete and encryption on the S3 bucket.
B. Create a new AWS CloudTrail trail in each member account of the organization. Createnew Amazon S3 buckets to store the logs. Deploy the trail to all AWS Regions. EnableMFA delete and encryption on the S3 buckets.
C. Create a new AWS CloudTrail trail in the organization's management account. Create anew Amazon S3 bucket with versioning turned on to store the logs. Deploy the trail for allaccounts in the organization. Enable MFA delete and encryption on the S3 bucket.
D. Create a new AWS CloudTrail trail in the organization's management account. Create anew Amazon S3 bucket to store the logs. Configure Amazon Simple Notification Service(Amazon SNS) to send log-file delivery notifications to an external management systemthat will track the logs. Enable MFA delete and encryption on the S3 bucket.

Show / Hide Answer

---

<12345678910111213141516171819202122>

---

Download All 683 Questions Check Customers Feedbacks