Amazon
SAP-C01 Exam
Questions

AWS Certified Solutions Architect - Professional SAP-C01

Amazon (SAP-C01) Exam Questions And Answers page 56

How can a solutions architect reduce costs and simplify the architecture of a web application hosted in a dedicated VPC?

Single Choice

A web application is hosted in a dedicated VPC that is connected to a company s on-premises data center over a Site-to-Site VPN connection. The application is accessible from the company network only. This is a temporary non-production application that is used during business hours. The workload is generally low with occasional surges.

The application has an Amazon Aurora MySQL provisioned database cluster on the backend. The VPC has an internet gateway and a NAT gateways attached. The web servers are in private subnets in an Auto Scaling group behind an Elastic Load Balancer. The web servers also upload data to an Amazon S3 bucket through the internet.

A solutions architect needs to reduce operational costs and simplify the architecture.

Which strategy should the solutions architect use?

Review the Auto Scaling group settings and ensure the scheduled actions are specified to operate the Amazon EC2 instances during business hours only. Use 3-year scheduled Reserved Instances for the web server EC2 instances. Detach the internet gateway and remove the NAT gateways from the VPC. Use an Aurora Serverless database and set up a VPC endpoint for the S3 bucket.

Review the Auto Scaling group settings and ensure the scheduled actions are specified to operate the Amazon EC2 instances during business hours only. Detach the internet gateway and remove the NAT gateways from the VPC. Use an Aurora Serverless database and set up a VPC endpoint for the S3 bucket, then update the network routing and security rules and policies related to the changes.

Review the Auto Scaling group settings and ensure the scheduled actions are specified to operate the Amazon EC2 instances during business hours only. Detach the internet gateway from the VPC, and use an Aurora Serverless database. Set up a VPC endpoint for the S3 bucket, then update the network routing and security rules and policies related to the changes.

Use 3-year scheduled Reserved Instances for the web server Amazon EC2 instances. Remove the NAT gateways from the VPC, and set up a VPC endpoint for the S3 bucket. Use Amazon CloudWatch and AWS Lambda to stop and start the Aurora DB cluster so it operates during business hours only. Update the network routing and security rules and policies related to the changes.

Implementing cost control strategies

How should a web company implement an external payment service in their highly available application?

Single Choice

A web company is looking to implement an external payment service into their highly available application deployed in a VPC Their application EC2 instances are behind a public facing ELB. Auto scaling is used to add additional instances as traffic increases under normal load the application runs 2 instances in the Auto Scaling group but at peak it can scale 3x in size. The application instances need to communicate with the payment service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API.

How should they architect their solution?

Route payment requests through two NAT instances setup for High Availability and whitelist the Elastic IP addresses attached to the MAT instances.

Whitelist the VPC Internet Gateway Public IP and route payment requests through the Internet Gateway.

Whitelist the ELB IP addresses and route payment requests from the Application servers through the ELB.

Automatically assign public IP addresses to the application instances in the Auto Scaling group and run a script on boot that adds each instances public IP address to the payment validation whitelist API.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

How to architect a scalable intrusion detection and prevention system for a web company's VPC?

Single Choice

A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC.

How should they architect their solution to achieve these goals?

Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous mode packet sniffing to see an traffic across the VPC.

Create a second VPC and route all traffic from the primary application VPC through the second VPC where the scalable virtualized IDS/IPS platform resides.

Configure servers running in the VPC using the host-based 'route' commands to send all traffic through the platform to a scalable virtualized IDS/IPS.

Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform for inspection.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What AWS architecture is recommended for a web design company to maintain customer privacy and minimize costs while moving their FTP servers to AWS?

Single Choice

A web design company currently runs several FTP servers that their 250 customers use to upload and download large graphic files They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy and Keep costs to a minimum.

What AWS architecture would you recommend?

ASK their customers to use an S3 client instead of an FTP client. Create a single S3 bucket Create an IAM user for each customer Put the IAM Users in a Group that has an IAM policy that permits access to sub-directories within the bucket via use of the 'username' Policy variable.

Create a single S3 bucket with Reduced Redundancy Storage turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket for each customer with a Bucket Policy that permits access only to that one customer.

Create an auto-scaling group of FTP servers with a scaling policy to automatically scale-in when minimum network traffic on the auto-scaling group is below a given threshold. Load a central list of ftp users from S3 as part of the user Data startup script on each Instance.

Create a single S3 bucket with Requester Pays turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket tor each customer with a Bucket Policy that permits access only to that one customer.

Designing enterprise-wide scalable operations on AWS Designing for security and compliance

What AWS Ops Works configuration is needed to integrate a new chat module in a cost-efficient and flexible way?

Single Choice

A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load Balancer, an Auto-Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The main web-application best runs on m2 x large instances since it is highly memory- bound Each new deployment requires semi-automated creation and testing of a new AMI for the application servers which takes quite a while ana is therefore only done once per week.
Recently, a new chat feature has been implemented in nodejs and wails to be integrated in the architecture. First tests show that the new component is CPU bound Because the company has some experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works as an application life cycle tool to simplify management of the application and reduce the deployment cycles.

What configuration in AWS Ops Works is necessary to integrate the new chat module in the most cost-efficient and flexible way?

Create one AWS OpsWorks stack, create one AWS Ops Works layer, create one custom recipe

Create one AWS OpsWorks stack create two AWS Ops Works layers, create one custom recipe

Create two AWS OpsWorks stacks create two AWS Ops Works layers, create one custom recipe

Create two AWS OpsWorks stacks create two AWS Ops Works layers, create two custom recipe

Designing highly available, cost-efficient, fault-tolerant, scalable systems Implementing cost control strategies

What are AWS CloudFormation intrinsic functions used for assigning values at runtime?

Single Choice

AWS CloudFormation ______ are special actions you use in your template to assign values to properties that are not available until runtime.

intrinsic functions

properties declarations

output functions

conditions declarations

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

How can access to AWS Direct Connect actions be controlled without specific AWS Direct Connect ARNs?

Single Choice

AWS Direct Connect itself has NO specific resources for you to control access to. Therefore, there are no AWS Direct Connect Amazon Resource Names (ARNs) for you to use in an Identity and Access Management (IAM) policy.

With that in mind, how is it possible to write a policy to control access to AWS Direct Connect actions?

You can leave the resource name field blank.

You can choose the name of the AWS Direct Connection as the resource.

You can use an asterisk (*) as the resource.

You can create a name for the resource.

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

What option should an organization implement while launching a T2 instance for high usage during a specific time period?

Single Choice

AWS has launched T2 instances which come with CPU usage credit. An organization has a requirement which keeps an instance running for 24 hours. However, the organization has high usage only during 11 AM to 12 PM. The organization is planning to use a T2 small instance for this purpose.

If the organization already has multiple instances running since Jan 2012, which of the below mentioned options should the organization implement while launching a T2 instance?

The organization must migrate to the EC2-VPC platform first before launching a T2 instance.

While launching a T2 instance the organization must create a new AWS account as this account does not have the EC2-VPC platform.

Create a VPC and launch a T2 instance as part of one of the subnets of that VPC.

While launching a T2 instance the organization must select EC2-VPC as the platform.

Designing highly available, cost-efficient, fault-tolerant, scalable systems

What types of environments does AWS support as one of its resource types?

Single Choice

AWS ________supports__________ environments as one of the AWS resource types.

Elastic Beanstalk; Elastic Beanstalk application

CloudFormation; Elastic Beanstalk application

Elastic Beanstalk ; CloudFormation application

CloudFormation; CloudFormation application

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing enterprise-wide scalable operations on AWS

How does Amazon Cognito handle data conflicts and enable push synchronization for notifying devices?

Single Choice

By default, Amazon Cognito maintains the last-written version of the data. You can override this behavior and resolve data conflicts programmatically.
In addition, push synchronization allows you to use Amazon Cognito to send a silent notification to all devices associated with an identity to notify them that new data is available.

get

post

pull

push

Designing highly available, cost-efficient, fault-tolerant, scalable systems Designing for security and compliance

Previous Questions

Next Questions

Amazon (SAP-C01) Exam Questions And Answers page 56

How can a solutions architect reduce costs and simplify the architecture of a web application hosted in a dedicated VPC?

Comments

How should a web company implement an external payment service in their highly available application?

Comments

How to architect a scalable intrusion detection and prevention system for a web company's VPC?

Comments

What AWS architecture is recommended for a web design company to maintain customer privacy and minimize costs while moving their FTP servers to AWS?

Correct Answer:

Explanation:

References:

Comments

What AWS Ops Works configuration is needed to integrate a new chat module in a cost-efficient and flexible way?

Comments

What are AWS CloudFormation intrinsic functions used for assigning values at runtime?

Correct Answer:

Explanation:

References:

Comments

How can access to AWS Direct Connect actions be controlled without specific AWS Direct Connect ARNs?

Correct Answer:

Explanation:

References:

Comments

What option should an organization implement while launching a T2 instance for high usage during a specific time period?

Correct Answer:

Explanation:

References:

Comments

What types of environments does AWS support as one of its resource types?

Correct Answer:

Explanation:

References:

Comments

How does Amazon Cognito handle data conflicts and enable push synchronization for notifying devices?

Correct Answer:

References:

Comments

{{ exam.shortName }}

{{ exam.longName }}