Amazon
SAP-C01 Exam
Questions

AWS Certified Solutions Architect - Professional SAP-C01

Amazon (SAP-C01) Exam Questions And Answers page 48

How can a solutions architect eliminate single points of failure in a recently migrated application on AWS?

Multiple Choice

A solutions architect is evaluating the reliability of a recently migrated application running on AWS. The front end is hosted on Amazon S3 and accelerated by Amazon CloudFront. The application layer is running in a stateless Docker container on an Amazon EC2 On-Demand Instance with an Elastic IP address. The storage layer is a MongoDB database running on an EC2 Reserved Instance in the same Availability Zone as the application layer.

Which combination of steps should the solutions architect take to eliminate single points of failure with minimal application code changes? (Choose two.)

Create a REST API in Amazon API Gateway and use AWS Lambda functions as the application layer

Create an Application Load Balancer and migrate the Docker container to AWS Fargate

Migrate the storage layer to Amazon DynamoDB

Migrate the storage layer to Amazon DocumentDB (with MongoDB compatibility)

Create an Application Load Balancer and move the storage layer to an EC2 Auto Scaling group

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

What actions enable authentication and authorization for federated access to AWS in a mobile application?

Multiple Choice

A solutions architect is implementing federated access to AWS for users of the company s mobile application. Due to regulatory and security requirements, the application must use a custom-built solution for authenticating users and must use IAM roles for authorization.

Which of the following actions would enable authentication and authorization and satisfy the requirements? (Choose two.)

Use a custom-built SAML-compatible solution for authentication and AWS SSO for authorization.

Create a custom-built LDAP connector using Amazon API Gateway and AWS Lambda for authentication. Store authorization tokens in Amazon DynamoDB, and validate authorization requests using another Lambda function that reads the credentials from DynamoDB.

Use a custom-built OpenID Connect-compatible solution with AWS SSO for authentication and authorization.

Use a custom-built SAML-compatible solution that uses LDAP for authentication and uses a SAML assertion to perform authorization to the IAM identity provider.

Use a custom-built OpenID Connect-compatible solution for authentication and use Amazon Cognito for authorization.

Implementing cost control strategies Designing for security and compliance

How to securely manage database credentials for a two-tier web application in AWS CloudFormation?

Single Choice

A solutions architect is implementing infrastructure as code for a two-tier web application in an AWS CloudFormation template. The web frontend application will be deployed on Amazon EC2 instances in an Auto Scaling group. The backend database will be an Amazon RDS for MySQL DB instance. The database password will be rotated every 60 days.

How can the solutions architect MOST securely manage the configuration of the application's database credentials?

Provide the database password as a parameter in the CloudFormation template. Create an initialization script in the Auto Scaling group's launch configuration UserData property to reference the password parameter using the Ref intrinsic function. Store the password on the EC2 instances. Reference the parameter for the value of the MasterUserPassword property in the AWS::RDS::DBInstance resource using the Ref intrinsic function.

Create a new AWS Secrets Manager secret resource in the CloudFormation template to be used as the database password. Configure the application to retrieve the password from Secrets Manager when needed. Reference the secret resource for the value of the MasterUserPassword property in the AWS::RDS::DBInstance resource using a dynamic reference.

Create a new AWS Secrets Manager secret resource in the CloudFormation template to be used as the database password. Create an initialization script in the Auto Scaling group's launch configuration UserData property to reference the secret resource using the Ref intrinsic function. Reference the secret resource for the value of the MasterUserPassword property in the AWS::RDS::DBInstance resource using the Ref intrinsic function.

Create a new AWS Systems Manager Parameter Store parameter in the CloudFormation template to be used as the database password. Create an initialization script in the Auto Scaling group's launch configuration UserData property to reference the parameter. Reference the parameter for the value of the MasterUserPassword property in the AWS::RDS::DBInstance resource using the Fn::GetAtt intrinsic function.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

How to troubleshoot an EC2 instance not appearing as a managed instance in AWS Systems Manager?

Multiple Choice

A solutions architect is importing a VM from an on-premises environment by using the Amazon EC2 VM Import feature of AWS Import/Export. The solutions architect has created an AMI and has provisioned an Amazon EC2 instance that is based on that AMI. The EC2 instance runs inside a public subnet in a VPC and has a public IP address assigned.

The EC2 instance does not appear as a managed instance in the AWS Systems Manager console.

Which combination of steps should the solutions architect take to troubleshoot this issue? (Choose two.)

Verify the correct configuration of service-linked roles for Systems Manager.

Verify that Systems Manager Agent is installed on the instance and is running

Verify that the instance is assigned an appropriate IAM role for Systems Manager.

Verify the existence of a VPC endpoint on the VPC.

Verify that the AWS Application Discovery Agent is configured.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

What is the least complex method for securely and reliably migrating a 10 TB PostgreSQL database to Amazon RDS within an 8-day period?

Single Choice

A Solutions Architect is migrating a 10 TB PostgreSQL database to Amazon RDS for PostgreSQL. The company s internet link is 50 MB with a VPN in the Amazon VPC, and the Solutions Architect needs to migrate the data and synchronize the changes before the cutover. The cutover must take place within an 8-day period.
What is the LEAST complex method of migrating the database securely and reliably?

Order an AWS Snowball device and copy the database using the AWS DMS. When the database is available in Amazon S3, use AWS DMS to load it to Amazon RDS, and configure a job to synchronize changes before the cutover.

Create an AWS DMS job to continuously replicate the data from on premises to AWS. Cutover to Amazon RDS after the data is synchronized.

Order an AWS Snowball device and copy a database dump to the device. After the data has been copied to Amazon S3, import it to the Amazon RDS instance. Set up log shipping over a VPN to synchronize changes before the cutover.

Order an AWS Snowball device and copy the database by using the AWS Schema Conversion Tool. When the data is available in Amazon S3, use AWS DMS to load it to Amazon RDS, and configure a job to synchronize changes before the cutover.

Migrating complex, multi-tier applications on AWS Designing for security and compliance

How to resolve the "CannotPullContainerError" when migrating a workload to AWS Fargate in a private subnet?

Single Choice

A solutions architect is migrating an existing workload to AWS Fargate. The task can only run in a private subnet within the VPC where there is no direct connectivity from outside the system to the application. When the Fargate task is launched, the task fails with the following error:

CannotPullContainerError: API error (500): Get https://111122223333.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request canceled while waiting for connection

How should the solutions architect correct this error?

Ensure the task is set to ENABLED for the auto-assign public IP setting when launching the task.

Ensure the task is set to DISABLED for the auto-assign public IP setting when launching the task. Configure a NAT gateway in the public subnet in the VPC to route requests to the internet.

Ensure the task is set to DISABLED for the auto-assign public IP setting when launching the task. Configure a NAT gateway in the private subnet in the VPC to route requests to the internet.

Ensure the network mode is set to bridge in the Fargate task definition.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What is the most cost-effective architecture for a SaaS image-viewing and messaging platform?

Single Choice

A Solutions Architect is redesigning an image-viewing and messaging platform to be delivered as SaaS. Currently, there is a farm of virtual desktop infrastructure (VDI) that runs a desktop image-viewing application and a desktop messaging application. Both applications use a shared database to manage user accounts and sharing. Users log in from a web portal that launches the applications and streams the view of the application on the user s machine. The Development Operations team wants to move away from using VDI and wants to rewrite the application.

What is the MOST cost-effective architecture that offers both security and ease of management?

Run a website from an Amazon S3 bucket with a separate S3 bucket for images and messaging data. Call AWS Lambda functions from embedded JavaScript to manage the dynamic content, and use Amazon Cognito for user and sharing management.

Run a website from Amazon EC2 Linux servers, storing the images in Amazon S3, and use Amazon Cognito for user accounts and sharing. Create AWS CloudFormation templates to launch the application by using EC2 user data to install and configure the application.

Run a website as an AWS Elastic Beanstalk application, storing the images in Amazon S3, and using an Amazon RDS database for user accounts and sharing. Create AWS CloudFormation templates to launch the application and perform blue/green deployments.

Run a website from an Amazon S3 bucket that authorizes Amazon AppStream to stream applications for a combined image viewer and messenger that stores images in Amazon S3. Have the website use an Amazon RDS database for user accounts and sharing.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Implementing cost control strategies

How can the availability, durability, and processing latency of a legacy Java application be improved while minimizing costs?

Single Choice

A Solutions Architect is responsible for redesigning a legacy Java application to improve its availability, data durability, and scalability. Currently, the application runs on a single high-memory Amazon EC2 instance. It accepts HTTP requests from upstream clients, adds them to an in-memory queue, and responds with a 200 status. A separate application thread reads items from the queue, processes them, and persists the results to an Amazon RDS MySQL instance. The processing time for each item takes 90 seconds on average, most of which is spent waiting on external service calls, but the application is written to process multiple items in parallel.

Traffic to this service is unpredictable. During periods of high load, items may sit in the internal queue for over an hour while the application processes the backlog. In addition, the current system has issues with availability and data loss if the single application node fails.

Clients that access this service cannot be modified. They expect to receive a response to each HTTP request they send within 10 seconds before they will time out and retry the request.

Which approach would improve the availability and durability of the system while decreasing the processing latency and minimizing costs?

Create an Amazon API Gateway REST API that uses Lambda proxy integration to pass requests to an AWS Lambda function. Migrate the core processing code to a Lambda function and write a wrapper class that provides a handler method that converts the proxy events to the internal application data model and invokes the processing module.

Create an Amazon API Gateway REST API that uses a service proxy to put items in an Amazon SQS queue. Extract the core processing code from the existing application and update it to pull items from Amazon SQS instead of an in-memory queue. Deploy the new processing application to smaller EC2 instances within an Auto Scaling group that scales dynamically based on the approximate number of messages in the Amazon SQS queue.

Modify the application to use Amazon DynamoDB instead of Amazon RDS. Configure Auto Scaling for the DynamoDB table. Deploy the application within an Auto Scaling group with a scaling policy based on CPU utilization. Back the in-memory queue with a memory-mapped file to an instance store volume and periodically write that file to Amazon S3.

Update the application to use a Redis task queue instead of the in-memory queue. Build a Docker container image for the application. Create an Amazon ECS task definition that includes the application container and a separate container to host Redis. Deploy the new task definition as an ECS service using AWS Fargate, and enable Auto Scaling.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

What is the most cost-effective solution to mitigate throttling issues in an Auto Scaling group accessing a DynamoDB table?

Single Choice

A solutions architect is troubleshooting an application that runs on Amazon EC2 instances. The EC2 instances run in an Auto Scaling group. The application needs to access user data in an Amazon DynamoDB table that has fixed provisioned capacity.

To match the increased workload, the solutions architect recently doubled the maximum size of the Auto Scaling group. Now, when many instances launch at the same time, some application components are throttled when the components scan the DynamoDB table. The Auto Scaling group terminates the failing instances and starts new instances until all applications are running

A solutions architect must implement a solution to mitigate the throttling issue in the MOST cost-effective manner

Which solution will meet these requirements?

Double the provisioned read capacity of the DynamoDB table.

Duplicate the DynamoDB table. Configure the running copy of the application to select at random which table it access.

Set the DynamoDB table to on-demand mode.

Add DynamoDB Accelerator (DAX) to the table.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

How can a company achieve predictable AWS spend by implementing cost control and monitoring measures?

Multiple Choice

A Solutions Architect is working with a company that is extremely sensitive to its IT costs and wishes to implement controls that will result in a predictable AWS spend each month.

Which combination of steps can help the company control and monitor its monthly AWS usage to achieve a cost that is as close as possible to the target amount? (Choose three.)

Implement an IAM policy that requires users to specify a workload tag for cost allocation when launching Amazon EC2 instances.

Contact AWS Support and ask that they apply limits to the account so that users are not able to launch more than a certain number of instance types.

Purchase all upfront Reserved Instances that cover 100% of the account s expected Amazon EC2 usage.

Place conditions in the users IAM policies that limit the number of instances they are able to launch.

Define workload as a cost allocation tag in the AWS Billing and Cost Management console.

Set up AWS Budgets to alert and notify when a given workload is expected to exceed a defined cost.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Implementing cost control strategies

Previous Questions

Next Questions

Amazon (SAP-C01) Exam Questions And Answers page 48

How can a solutions architect eliminate single points of failure in a recently migrated application on AWS?

Comments

What actions enable authentication and authorization for federated access to AWS in a mobile application?

Comments

How to securely manage database credentials for a two-tier web application in AWS CloudFormation?

Comments

How to troubleshoot an EC2 instance not appearing as a managed instance in AWS Systems Manager?

Comments

What is the least complex method for securely and reliably migrating a 10 TB PostgreSQL database to Amazon RDS within an 8-day period?

Comments

How to resolve the "CannotPullContainerError" when migrating a workload to AWS Fargate in a private subnet?

Comments

What is the most cost-effective architecture for a SaaS image-viewing and messaging platform?

Comments

How can the availability, durability, and processing latency of a legacy Java application be improved while minimizing costs?

Correct Answer:

References:

Comments

What is the most cost-effective solution to mitigate throttling issues in an Auto Scaling group accessing a DynamoDB table?

Correct Answer:

References:

Comments

How can a company achieve predictable AWS spend by implementing cost control and monitoring measures?

Comments

{{ exam.shortName }}

{{ exam.longName }}