Exam Code
SAP-C02
Exam Name
AWS Certified Solutions Architect - Professional
Questions
405
Update Date
May 20,2024
Price
Was : $81 Today : $45
Check out AmazonExams for Premium dumps.
https://www.amazonexams.com/sap-c02.html
We clap you for starting on the path to earn the recognized SAP-C02 certification! At AmazonExams.com, our dedication is to support your career advancement by supplying high-quality materials for the SAP-C02 exam. With our thorough and expertly designed resources, we assure you a 100% pass guarantee, securing your success in the certification process.
Carefully Crafted Study Guides: Our study guides are thoughtfully created by experts who truly grip the key aspects of the SAP-C02 exam. These SAP-C02 materials encompass all the crucial topics you need to know.
Getting Better through Practice: Our online SAP-C02 practice mode is built to mirror the real test atmosphere. Through timed sessions, you'll feel the pressure similar to the actual exam, boosting your confidence in time management. This approach allows you to evaluate your understanding and pinpoint areas where you can enhance your knowledge.
Learning from Mistakes is Key to Improvement: Our practice SAP-C02 questions come with detailed explanations for each answer, providing you with insights into the correct approach. This helps you understand the reasoning behind each solution and learn from any errors you might make along the way.
Join Our Community of Success: AmazonExams.com is proud of the many individuals who have successfully earned their Amazon SAP-C02 certification using our authentic exam materials. You can become part of this community of accomplished professionals who have opened doors to new career opportunities and earned recognition in the IT industry.
Approach Your Certification Exam with Confidence: Thanks to AmazonExams.com's SAP-C02 exam study material and our 100% passing guarantee, you can face the certification exam with confidence and assurance. We believe that our thorough resources, coupled with your dedication and effort, will guide you towards success.
Get More Info: https://www.amazonexams.com/sap-c02.html
Question 1
A solutions architect needs to improve an application that is hosted in the AWS Cloud. The application-overloaded connections use an Amazon Aurora MySQL DB instance that is experiencing overloadedconnections. Most of the application's operations insert records into the database. The application currently stores credentials in a text-based configuration file. The solutions architect needs to implement a solution so that the application can handle the current connection load. The solution must keep the credentials secure and provide provide the ability to rotate the credentials automatically and regularly. Which solution will meet these requirements?
A. Deploy an Amazon RDS Proxy layer in front of the DB instance. Store the connection credentials as a secret in AWS Secrets Manager. B. Deploy an Amazon RDS Proxy layer in front of the DB instance. Store the connection in the AWS Systems Manager Parameter Store. C. Create an Aurora Replica. Store the connection credentials as a secret in AWS SecretsManager. D. Create an Aurora Replica. Store the connection credentials in the AWS Systems ManagerParameter Store.
Answer: A
Question 2
A company is migrating an on-premises application and a MySQL database to AWS. The application processes compassionate data, and new data is constantly updated in thedatabase. The data must not be transferred over the internet. The company also mustencrypt the data in transit and at rest.The database is 5 TB in size. The company already has created the database schema inan Amazon RDS for MySQL DB instance. The company has set up a 1 Gbps AWS Direct Connect connection to AWS. The company also has set up a public VIF and a private VIF.A solutions architect needs to design a solution that will migrate the data to AWS with theleast possible downtime.Which solution will meet these requirements?
A. Perform a database backup. Copy the backup files to an AWS Snowball Edge StorageOptimized device. Import the backup to Amazon S3. Use server-side encryption withAmazon S3 managed encryption keys (SSE-S3) for encryption at rest. Use TLS forencryption in transit. Import the data from Amazon S3 to the DB instance. B. Use AWS Database Migration Service (AWS DMS) to migrate the data to AWS. Createa DMS replication instance in a private subnet. Create VPC endpoints for AWS DMS.Configure a DMS task to copy data from the on-premises database to the DB instance byusing full load plus change data capture (CDC). Use the AWS Key Management Service(AWS KMS) default key for encryption at rest. Use TLS for encryption in transit. C. Perform a database backup. Use AWS DataSync to transfer the backup files to AmazonS3. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) forencryption at rest. Use TLS for encryption in transit. Import the data from Amazon S3 to theDB instance. D. Use Amazon S3 File Gateway. Set up a private connection to Amazon S3 by using AWSPrivateLink. Perform a database backup. Copy the backup files to Amazon S3. Use serversideencryption with Amazon S3 managed encryption keys (SSE-S3) for encryption at rest.Use TLS for encryption in transit. Import the data from Amazon S3 to the DB instance.
Answer: B
Question 3
A company is serving files to its customers through an SFTP server that is accessible overthe internet The SFTP server is running on a single Amazon EC2 instance with an ElasticIP address attached Customers connect to the SFTP server through its Elastic IP addressand use SSH for authentication The EC2 instance also has an attached security group thatallows access from all customer IP addresses.A solutions architect must implement a solution to improve availability minimize thecomplexity of infrastructure management and minimize the disruption to customers whoaccess files. The solution must not change the way customers connectWhich solution will meet these requirements?
A. Disassociate the Elastic IP address from the EC2 instance Create an Amazon S3 bucketto be used for SFTP file hosting Create an AWS Transfer Family server. Configure theTransfer Family server with a publicly accessible endpoint Associate the SFTP Elastic IPaddress with the new endpoint. Point the Transfer Family server to the S3 bucket Sync allfiles from the SFTP server to the S3 bucket. B. Disassociate the Elastic IP address from the EC2 instance Create an Amazon S3 bucketto be used for SFTP file hosting Create an AWS Transfer Family Server Configure theTransfer Family server with a VPC-hosted, internet-facing endpoint Associate the SFTPElastic IP address with the new endpoint Attach the security group with customer IPaddresses to the new endpoint Point the Transfer Family server to the S3 bucket. Sync allfiles from the SFTP server to the S3 bucket. C. Disassociate the Elastic IP address from the EC2 instance. Create a new AmazonElastic File System (Amazon EFS) file system to be used for SFTP file hosting. Create anAWS Fargate task definition to run an SFTP server Specify the EFS file system as a mountin the task definition Create a Fargate service by using the task definition, and place aNetwork Load Balancer (NLB) in front of the service. When configuring the service, attachthe security group with customer IP addresses to the tasks that run the SFTP serverAssociate the Elastic IP address with the NLB Sync all files from the SFTP server to the S3bucket. D. Disassociate the Elastic IP address from the EC2 instance. Create a multi-attachAmazon Elastic Block Store (Amazon EBS) volume to be used for SFTP file hosting.Create a Network Load Balancer (NLB) with the Elastic IP address attached. Create anAuto Scaling group with EC2 instances that run an SFTP server. Define in the Auto Scalinggroup that instances that are launched should attach the new multi-attach EBS volumeConfigure the Auto Scaling group to automatically add instances behind the NLB. configurethe Auto Scaling group to use the security group that allows customer IP addresses for theEC2 instances that the Auto Scaling group launches Sync all files from the SFTP server tothe new multi-attach EBS volume.
Question 4
An online retail company hosts its stateful web-based application and MySQL database inan on-premises data center on a single server. The company wants to increase itscustomer base by conducting more marketing campaigns and promotions. In preparation,the company wants to migrate its application and database to AWS to increase thereliability of its architecture.Which solution should provide the HIGHEST level of reliability?
A. Migrate the database to an Amazon RDS MySQL Multi-AZ DB instance. Deploy theapplication in an Auto Scaling group on Amazon EC2 instances behind an Application LoadBalancer. Store sessions in Amazon Neptune. B. Migrate the database to Amazon Aurora MySQL. Deploy the application in an AutoScaling group on Amazon EC2 instances behind an Application Load Balancer. Storesessions in an Amazon ElastiCache for Redis replication group. C. Migrate the database to Amazon DocumentDB (with MongoDB compatibility). Deploythe application in an Auto Scaling group on Amazon EC2 instances behind a Network LoadBalancer. Store sessions in Amazon Kinesis Data Firehose. D. Migrate the database to an Amazon RDS MariaDB Multi-AZ DB instance. Deploy theapplication in an Auto Scaling group on Amazon EC2 instances behind an Application LoadBalancer. Store sessions in Amazon ElastiCache for Memcached.
Question 5
A car rental company has built a serverless REST API to provide data to its mobile app.The app consists of an Amazon API Gateway API with a Regional endpoint, AWS Lambdafunctions, and an Amazon Aurora MySQL Serverless DB cluster. The company recentlyopened the API to mobile apps of partners. A significant increase in the number of requestsresulted, causing sporadic database memory errors. Analysis of the API traffic indicatesthat clients are making multiple HTTP GET requests for the same queries in a short periodof time. Traffic is concentrated during business hours, with spikes around holidays andother events.The company needs to improve its ability to support the additional usage while minimizingthe increase in costs associated with the solution.Which strategy meets these requirements?
A. Convert the API Gateway Regional endpoint to an edge-optimized endpoint. Enablecaching in the production stage. B. Implement an Amazon ElastiCache for Redis cache to store the results of the databasecalls. Modify the Lambda functions to use the cache. C. Modify the Aurora Serverless DB cluster configuration to increase the maximum amountof available memory. D. Enable throttling in the API Gateway production stage. Set the rate and burst values tolimit the incoming calls.
Question 6
A company has a web application that securely uploads pictures and videos to an AmazonS3 bucket. The company requires that only authenticated users are allowed to postcontent. The application generates a presigned URL that is used to upload objects througha browser interface. Most users are reporting slow upload times for objects larger than 100MB.What can a Solutions Architect do to improve the performance of these uploads whileensuring only authenticated users are allowed to post content?
A. Set up an Amazon API Gateway with an edge-optimized API endpoint that has aresource as an S3 service proxy. Configure the PUT method for this resource to exposethe S3 PutObject operation. Secure the API Gateway using a COGNITO_USER_POOLSauthorizer. Have the browser interface use API Gateway instead of the presigned URL toupload objects. B. Set up an Amazon API Gateway with a regional API endpoint that has a resource as anS3 service proxy. Configure the PUT method for this resource to expose the S3 PutObjectoperation. Secure the API Gateway using an AWS Lambda authorizer. Have the browserinterface use API Gateway instead of the presigned URL to upload API objects. C. Enable an S3 Transfer Acceleration endpoint on the S3 bucket. Use the endpoint whengenerating the presigned URL. Have the browser interface upload the objects to this URLusing the S3 multipart upload API. D. Configure an Amazon CloudFront distribution for the destination S3 bucket. Enable PUTand POST methods for the CloudFront cache behavior. Update the CloudFront origin touse an origin access identity (OAI). Give the OAI user s3:PutObject permissions in the bucket policy. Have the browser interface upload objects using the CloudFront distribution.
Answer: C
Question 7
A company has a website that runs on four Amazon EC2 instances that are behind anApplication Load Balancer (ALB). When the ALB detects that an EC2 instance is no longeravailable, an Amazon CloudWatch alarm enters the ALARM state. A member of thecompany's operations team then manually adds a new EC2 instance behind the ALB.A solutions architect needs to design a highly available solution that automatically handlesthe replacement of EC2 instances. The company needs to minimize downtime during theswitch to the new solution.Which set of steps should the solutions architect take to meet these requirements?
A. Delete the existing ALB. Create an Auto Scaling group that is configured to handle theweb application traffic. Attach a new launch template to the Auto Scaling group. Create anew ALB. Attach the Auto Scaling group to the new ALB. Attach the existing EC2 instancesto the Auto Scaling group. B. Create an Auto Scaling group that is configured to handle the web application traffic.Attach a new launch template to the Auto Scaling group. Attach the Auto Scaling group tothe existing ALB. Attach the existing EC2 instances to the Auto Scaling group. C. Delete the existing ALB and the EC2 instances. Create an Auto Scaling group that isconfigured to handle the web application traffic. Attach a new launch template to the AutoScaling group. Create a new ALB. Attach the Auto Scaling group to the new ALB. Wait forthe Auto Scaling group to launch the minimum number of EC2 instances. D. Create an Auto Scaling group that is configured to handle the web application traffic. Attach a new launch template to the Auto Scaling group. Attach the Auto Scaling group tothe existing ALB. Wait for the existing ALB to register the existing EC2 instances with theAuto Scaling group.
Question 8
A company is deploying a third-party firewall appliance solution from AWS Marketplace tomonitor and protect traffic that leaves the company's AWS environments. The companywants to deploy this appliance into a shared services VPC and route all outbound internetboundtraffic through the appliances.A solutions architect needs to recommend a deployment method that prioritizes reliabilityand minimizes failover time between firewall appliances within a single AWS Region. Thecompany has set up routing from the shared services VPC to other VPCs.Which steps should the solutions architect recommend to meet these requirements?(Select THREE.)
A. Deploy two firewall appliances into the shared services VPC, each in a separateAvailability Zone. B. Create a new Network Load Balancer in the shared services VPC. Create a new targetgroup, and attach it to the new Network Load Balancer. Add each of the firewall applianceinstances to the target group. C. Create a new Gateway Load Balancer in the shared services VPC. Create a new targetgroup, and attach it to the new Gateway Load Balancer. Add each of the firewall applianceinstances to the target group. D. Create a VPC interface endpoint. Add a route to the route table in the shared servicesVPC. Designate the new endpoint as the next hop for traffic that enters the shared servicesVPC from other VPCs. E. Deploy two firewall appliances into the shared services VPC. each in the sameAvailability Zone. F. Create a VPC Gateway Load Balancer endpoint. Add a route to the route table in theshared services VPC. Designate the new endpoint as the next hop for traffic that enters theshared services VPC from other VPCs.
Answer: A,C,F
Question 9
An ecommerce company runs an application on AWS. The application has an Amazon APIGateway API that invokes an AWS Lambda function. The data is stored in an Amazon RDSfor PostgreSQL DB instance.During the company's most recent flash sale, a sudden increase in API calls negativelyaffected the application's performance. A solutions architect reviewed the AmazonCloudWatch metrics during that time and noticed a significant increase in Lambdainvocations and database connections. The CPU utilization also was high on the DBinstance.What should the solutions architect recommend to optimize the application's performance?
A. Increase the memory of the Lambda function. Modify the Lambda function to close thedatabase connections when the data is retrieved. B. Add an Amazon ElastiCache for Redis cluster to store the frequently accessed datafrom the RDS database. C. Create an RDS proxy by using the Lambda console. Modify the Lambda function to usethe proxy endpoint. D. Modify the Lambda function to connect to the database outside of the function's handler.Check for an existing database connection before creating a new connection.
Question 10
A company hosts a software as a service (SaaS) solution on AWS. The solution has anAmazon API Gateway API that serves an HTTPS endpoint. The API uses AWS Lambdafunctions for compute. The Lambda functions store data in an Amazon Aurora ServerlessVI database.The company used the AWS Serverless Application Model (AWS SAM) to deploy thesolution. The solution extends across multiple Availability Zones and has no disasterrecovery (DR) plan.A solutions architect must design a DR strategy that can recover the solution in anotherAWS Region. The solution has an R TO of 5 minutes and an RPO of 1 minute.What should the solutions architect do to meet these requirements?
A. Create a read replica of the Aurora Serverless VI database in the target Region. UseAWS SAM to create a runbook to deploy the solution to the target Region. Promote theread replica to primary in case of disaster. B. Change the Aurora Serverless VI database to a standard Aurora MySQL globaldatabase that extends across the source Region and the target Region. Use AWS SAM tocreate a runbook to deploy the solution to the target Region. C. Create an Aurora Serverless VI DB cluster that has multiple writer instances in the targetRegion. Launch the solution in the target Region. Configure the two Regional solutions towork in an active-passive configuration. D. Change the Aurora Serverless VI database to a standard Aurora MySQL globaldatabase that extends across the source Region and the target Region. Launch thesolution in the target Region. Configure the two Regional solutions to work in an activepassiveconfiguration.
Answer: D
Last changed5 months ago