Amazon
SAP-C01 Exam
Questions

AWS Certified Solutions Architect - Professional SAP-C01

Amazon (SAP-C01) Exam Questions And Answers page 38

How to Migrate an Order Processing App to AWS with High Availability?

Single Choice

An ecommerce company has an order processing application it wants to migrate to AWS. The application has inconsistent data volume patterns, but needs to be avail at all times. Orders must be processed as they occur and in the order that they are received.

Which set of steps should a solutions architect take to meet these requirements?

Use AWS Transfer for SFTP and upload orders as they occur. Use On-Demand Instances in multiple Availability Zones for processing.

Use Amazon SNS with FIFO and send orders as they occur. Use a single large Reserved Instance for processing.

Use Amazon SQS with FIFO and send orders as they occur. Use Reserved Instances in multiple Availability Zones for processing.

Use Amazon SQS with FIFO and send orders as they occur. Use Spot Instances in multiple Availability Zones for processing.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

What is the most reliable approach to design a highly available and scalable order processing application on AWS?

Single Choice

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The company s CIO has asked a Solutions Architect to design a simple, highly available, and loosely coupled order processing application. The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays.

Which of the following is the MOST reliable approach to meet the requirements?

Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them.

Receive the orders in an Amazon SQS queue and trigger an AWS Lambda function to process them.

Receive the orders using the AWS Step Functions program and trigger an Amazon ECS container to process them.

Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What could be the root cause of the long response times during the marketing campaign for an ecommerce website running on AWS with Amazon RDS for MySQL?

Single Choice

An ecommerce website running on AWS uses an Amazon RDS for MySQL DB instance with General Purpose SSD storage. The developers chose an appropriate instance type based on demand, and configured 100 GB of storage with a sufficient amount of free space.

The website was running smoothly for a few weeks until a marketing campaign launched. On the second day of the campaign, users reported long wait times and time outs. Amazon CloudWatch metrics indicated that both reads and writes to the DB instance were experiencing long response times. The CloudWatch metrics show 40% to 50% CPU and memory utilization, and sufficient free storage space is still available. The application server logs show no evidence of database connectivity issues.

What could be the root cause of the issue with the marketing campaign?

It exhausted the network bandwidth available to the RDS for MySQL DB instance.

It exhausted the I/O credit balance due to provisioning low disk storage during the setup phase.

It caused the data in the tables to change frequently, requiring indexes to be rebuilt to optimize queries.

It exhausted the maximum number of allowed connections to the database instance.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What is the most operationally efficient solution to prevent failed login attempts from overwhelming an authentication service in an Amazon ECS cluster?

Single Choice

An education company is running a web application used by college students around the world. The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB). A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application s authentication service. All the failed login attempts originate from about 500 different IP addresses that change each week. A solutions architect must prevent the failed login attempts from overwhelming the authentication service.

Which solution meets these requirements with the MOST operational efficiency?

Use AWS Firewall Manager to create a security group and security group policy to deny access from the IP addresses

Create an AWS WAF web ACL with a rate-based rule, and set the rule action to Block. Connect the web ACL to the ALB

Use AWS Firewall Manager to create a security group and security group policy to allow access only to specific CIDR ranges

Create an AWS WAF web ACL with an IP set match rule, and set the rule action to Block. Connect the web ACL to the ALB

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

When launching an instance, when can a public IP address be auto-assigned to the elastic network interface for eth0?

Single Choice

An elastic network interface (ENI) is a virtual network interface that you can attach to an instance in a VPC. An ENI can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you_____.

create an elastic network interface for eth1

include a MAC address

use an existing network interface

create an elastic network interface for eth0

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

How can AWS services be used to meet the requirements of an enterprise company's infrastructure services platform?

Multiple Choice

An enterprise company is building an infrastructure services platform for its users. The company has the following requirements:

• Provide least privilege access to users when launching AWS infrastructure so users cannot provision unapproved services.
• Use a central account to manage the creation of infrastructure services.
• Provide the ability to distribute infrastructure services to multiple accounts in AWS Organizations.
• Provide the ability to enforce tags on any infrastructure that is started by users.

Which combination of actions using AWS services will meet these requirements? (Choose three.)

Develop infrastructure services using AWS Cloud Formation templates. Add the templates to a central Amazon S3 bucket and add the-IAM roles or users that require access to the S3 bucket policy.

Develop infrastructure services using AWS Cloud Formation templates. Upload each template as an AWS Service Catalog product to portfolios created in a central AWS account. Share these portfolios with the Organizations structure created for the company.

Allow user IAM roles to have AWSCloudFormationFullAccess and AmazonS3ReadOnlyAccess permissions. Add an Organizations SCP at the AWS account root user level to deny all services except AWS CloudFormation and Amazon S3.

Allow user IAM roles to have ServiceCatalogEndUserAccess permissions only. Use an automation script to import the central portfolios to local AWS accounts, copy the TagOption assign users access and apply launch constraints.

Use the AWS Service Catalog TagOption Library to maintain a list of tags required by the company. Apply the TagOption to AWS Service Catalog products or portfolios.

Use the AWS CloudFormation Resource Tags property to enforce the application of tags to any CloudFormation templates that will be created for users.

Designing enterprise-wide scalable operations on AWS Designing for security and compliance

How Can a Multi-Account AWS Strategy Improve Cost Control and Governance?

Multiple Choice

An enterprise company is using a multi-account AWS strategy. There are separate accounts for development staging and production workloads. To control costs and improve governance the following requirements have been defined:

• The company must be able to calculate the AWS costs for each project.
• The company must be able to calculate the AWS costs for each environment development staging and production.
• Commonly deployed IT services must be centrally managed.
• Business units can deploy pre-approved IT services only.
• Usage of AWS resources in the development account must be limited.

Which combination of actions should be taken to meet these requirements? (Choose three.)

Apply environment, cost center, and application name tags to all taggable resources.

Configure custom budgets and define thresholds using Cost Explorer.

Configure AWS Trusted Advisor to obtain weekly emails with cost-saving estimates.

Create a portfolio for each business unit and add products to the portfolios using AWS CloudFormation in AWS Service Catalog.

Configure a billing alarm in Amazon CloudWatch.

Configure SCPs in AWS Organizations to allow services available using AWS.

Designing enterprise-wide scalable operations on AWS Implementing cost control strategies

What is the most efficient method for enabling self-service Jupyter notebook launches in AWS accounts?

Single Choice

An enterprise company's data science team wants to provide a safe, cost-effective way to provide easy access to Amazon SageMaker. The data scientists have limited AWS knowledge and need to be able to launch a Jupyter notebook instance. The notebook instance needs to have a preconfigured AWS KMS key to encrypt data at rest on the machine learning storage volume without exposing the complex setup requirements.

Which approach will allow the company to set up a self-service mechanism for the data scientists to launch Jupyter notebooks in its AWS accounts with the LEAST amount of operational overhead?

Create a serverless front end using a static Amazon S3 website to allow the data scientists to request a Jupyter notebook instance by filling out a form. Use Amazon API Gateway to receive requests from the S3 website and trigger a central AWS Lambda function to make an API call to Amazon SageMaker that will launch a notebook instance with a preconfigured KMS key for the data scientists. Then call back to the front-end website to display the URL to the notebook instance.

Create an AWS CloudFormation template to launch a Jupyter notebook instance using the AWS::SageMaker::NotebookInstance resource type with a preconfigured KMS key. Add a user-friendly name to the CloudFormation template. Display the URL to the notebook using the Outputs section. Distribute the CloudFormation template to the data scientists using a shared Amazon S3 bucket.

Create an AWS CloudFormation template to launch a Jupyter notebook instance using the AWS::SageMaker::NotebookInstance resource type with a preconfigured KMS key. Simplify the parameter names, such as the instance size, by mapping them to Small, Large, and X-Large using the Mappings section in CloudFormation. Display the URL to the notebook using the Outputs section, then upload the template into an AWS Service Catalog product in the data scientist's portfolio, and share it with the data scientist's IAM role.

Create an AWS CLI script that the data scientists can run locally. Provide step-by-step instructions about the parameters to be provided while executing the AWS CLI script to launch a Jupyter notebook with a preconfigured KMS key. Distribute the CLI script to the data scientists using a shared Amazon S3 bucket.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What is the most efficient architecture design to restrict access to Private Marketplace in AWS Marketplace?

Single Choice

An enterprise company wants to allow its developers to purchase third-party software through AWS Marketplace. The company uses an AWS Organizations account structure with full features enabled, and has a shared services account in each organizational unit (OU) that will be used by procurement managers. The procurement team s policy indicates that developers should be able to obtain third-party software from an approved list only and use Private Marketplace in AWS Marketplace to achieve this requirement. The procurement team wants administration of Private Marketplace to be restricted to a role named procurement-manager-role, which could be assumed by procurement managers. Other IAM users, groups, roles, and account administrators in the company should be denied Private Marketplace administrative access.

What is the MOST efficient way to design an architecture to meet these requirements?

Create an IAM role named procurement-manager-role in all AWS accounts in the organization. Add the PowerUserAccess managed policy to the role. Apply an inline policy to all IAM users and roles in every AWS account to deny permissions on the AWSPrivateMarketplaceAdminFullAccess managed policy.

Create an IAM role named procurement-manager-role in all AWS accounts in the organization. Add the AdministratorAccess managed policy to the role. Define a permissions boundary with the AWSPrivateMarketplaceAdminFullAccess managed policy and attach it to all the developer roles.

Create an IAM role named procurement-manager-role in all the shared services accounts in the organization. Add the AWSPrivateMarketplaceAdminFullAccess managed policy to the role. Create an organization root-level SCP to deny permissions to administer Private Marketplace to everyone except the role named procurement-manager-role. Create another organization root-level SCP to deny permissions to create an IAM role named procurement-manager-role to everyone in the organization.

Create an IAM role named procurement-manager-role in all AWS accounts that will be used by developers. Add the AWSPrivateMarketplaceAdminFullAccess managed policy to the role. Create an SCP in Organizations to deny permissions to administer Private Marketplace to everyone except the role named procurement-manager-role. Apply the SCP to all the shared services accounts in the organization.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Implementing cost control strategies

Which solution will meet the requirements of tracking AWS costs in Organizations and generating notifications for exceeding a monetary threshold?

Single Choice

An enterprise company wants to implement cost controls for all its accounts in AWS Organizations, which has full features enabled. The company has mapped organizational units (OUs) to its business units, and it wants to bill these business units for their individual AWS spending. There has been a recent spike in the company s AWS bill, which is generating attention from the Finance team. A Solutions Architect needs to investigate the cause of the spike while designing a solution that will track AWS costs in Organizations and generate a notification to the required teams if costs from a business unit exceed a specific monetary threshold.

Which solution will meet these requirements?

Use Cost Explorer to troubleshoot the reason for the additional costs. Set up an AWS Lambda function to monitor the company s AWS bill by each AWS account in an OU. Store the threshold amount set by the Finance team in the AWS Systems Manager Parameter Store. Write the custom rules in the Lambda function to verify any hidden costs for the AWS accounts. Trigger a notification from the Lambda function to an Amazon SNS topic when a budget threshold is breached.

Use AWS Trusted Advisor to troubleshoot the reason for the additional costs. Set up an AWS Lambda function to monitor the company s AWS bill by each AWS account in an OU. Store the threshold amount set by the Finance team in the AWS Systems Manager Parameter Store. Write custom rules in the Lambda function to verify any hidden costs for the AWS accounts. Trigger an email to the required teams from the Lambda function using Amazon SNS when a budget threshold is breached.

Use Cost Explorer to troubleshoot the reason for the additional costs. Create a budget using AWS Budgets with the monetary amount set by the Finance team for each OU by grouping the linked accounts. Configure an Amazon SNS notification to the required teams in the budget.

Use AWS Trusted Advisor to troubleshoot the reason for the additional costs. Create a budget using AWS Budgets with the monetary amount set by the Finance team for each OU by grouping the linked accounts. Add the Amazon EC2 instance types to be used in the company as a budget filter. Configure an Amazon SNS topic with a subscription for the Finance team email address to receive budget notifications.

Implementing cost control strategies

Previous Questions

Next Questions

Amazon (SAP-C01) Exam Questions And Answers page 38

How to Migrate an Order Processing App to AWS with High Availability?

Comments

What is the most reliable approach to design a highly available and scalable order processing application on AWS?

Comments

What could be the root cause of the long response times during the marketing campaign for an ecommerce website running on AWS with Amazon RDS for MySQL?

Comments

What is the most operationally efficient solution to prevent failed login attempts from overwhelming an authentication service in an Amazon ECS cluster?

Correct Answer:

References:

Comments

When launching an instance, when can a public IP address be auto-assigned to the elastic network interface for eth0?

Correct Answer:

Explanation:

References:

Comments

How can AWS services be used to meet the requirements of an enterprise company's infrastructure services platform?

Comments

How Can a Multi-Account AWS Strategy Improve Cost Control and Governance?

Comments

What is the most efficient method for enabling self-service Jupyter notebook launches in AWS accounts?

Comments

What is the most efficient architecture design to restrict access to Private Marketplace in AWS Marketplace?

Comments

Which solution will meet the requirements of tracking AWS costs in Organizations and generating notifications for exceeding a monetary threshold?

Comments

{{ exam.shortName }}

{{ exam.longName }}