Master SAP-C02 Exams with Exam Questions & Study Materials, AWS Certified Solutions Architect - Professional

Question #1

A flood monitoring agency has deployed more than 10.000 water-level monitoring sensors. Sensors send continuous data updates, and each update Is less than 1 MB in size. The agency has a fleet of on-premises application servers. These servers receive updates from the sensors, convert the raw data into a human readable format, and write the results to an on-premises relational database server Data analysts then use simple SQL queries to monitor the data. The agency wants to increase overall application availa

A. Send the sensor data to Amazon Kinesis Data Firehos

B. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to

C. Instruct the data analysts to query the data directly from the DB Instance

D. Send the sensor data to Amazon Kinesis Data Firehos

E. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to Apache Parquet format, and save it to an Amazon S3 bucke

F. Instruct the data analysts to query the data by using Amazon Athena

View answer

Correct Answer: C

Question #2

A company is finalizing the architecture for its backup solution for applications running on AWS. All of the applications run on AWS and use at least two Availability Zones in each tier. Company policy requires IT to durably store nightly backups of all its data in at least two locations: production and disaster recovery. The locations must be m different geographic regions. The company also needs the backup to be available to restore immediately at the production data center, and within 24 hours at the dis

A. Back up all the data to a large Amazon EBS volume attached to the backup media server m the production regio

B. Run automated scripts to snapshot these volumes nightl

C. and copy these snapshots to the disaster recovery region

D. Back up all the data to Amazon S3 in the disaster recovery region Use a Lifecycle policy to move this data to Amazon Glacier in the production region immediately Only the data is replicated: remove the data from the S3 bucket in the disaster recovery region

E. Back up all the data to Amazon Glacier in the production regio

F. Set up cross-region replication of this data to Amazon Glacier in the disaster recovery regio G

View answer

Correct Answer: C

Question #3

A medical company is running an application in the AWS Cloud. The application simulates the effect of medical drugs in development. The application consists of two parts configuration and simulation The configuration part runs in AWS Fargate containers in an Amazon Elastic Container Service (Amazon ECS) cluster. The simulation part runs on large, compute optimized Amazon EC2 instances Simulations can restart if they are interrupted The configuration part runs 24 hours a day with a steady load. The simulatio

A. Purchase an EC2 Instance Savings Plan to cover the usage for the configuration part Run the simulation part by using EC2 Spot Instances Create an S3 Lifecycle policy to transition objects that are older than 30 days to S3 Intelligent-Tiering

B. Purchase an EC2 Instance Savings Plan to cover the usage for the configuration part and the simulation part Create an S3 Lifecycle policy to transition objects that are older than 30 days to S3 Glacier

C. Purchase Compute Savings Plans to cover the usage for the configuration part Run the simulation part by using EC2 Spot instances Create an S3 Lifecycle policy to transition objects that are older than 30 days to S3 Glacier

D. Purchase Compute Savings Plans to cover the usage for the configuration part Purchase EC2 Reserved Instances for the simulation part Create an S3 Lifecycle policy to transition objects that are older than 30 days to S3 Glacier Deep Archive

View answer

Correct Answer: A

Question #4

A company has its cloud infrastructure on AWS A solutions architect needs to define the infrastructure as code. The infrastructure is currently deployed in one AWS Region. The company's business expansion plan includes deployments in multiple Regions across multiple AWS accounts What should the solutions architect do to meet these requirements?

A. Use AWS CloudFormation templates Add IAM policies to control the various accounts Deploy the templates across the multiple Regions

B. Use AWS Organizations Deploy AWS CloudFormation templates from the management account Use AWS Control Tower to manage deployments across accounts

C. Use AWS Organizations and AWS CloudFormation StackSets Deploy a CloudFormation template from an account that has the necessary IAM permissions

D. Use nested stacks with AWS CloudFormation templates Change the Region by using nested stacks

View answer

Correct Answer: C

Question #5

A solutions architect works for a government agency that has strict disaster recovery requirements All Amazon Elastic Block Store (Amazon EBS) snapshots are required to be saved in at least two additional AWS Regions. The agency also is required to maintain the lowest possible operational overhead. Which solution meets these requirements?

A. Configure a policy in Amazon Data Lifecycle Manager (Amazon DLMJ to run once daily to copy the EBS snapshots to the additional Regions

B. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function to copy the EBS snapshots to the additional Regions

C. Set up AWS Backup to create the EBS snapshot

D. Configure Amazon S3 cross-Region replication to copy the EBS snapshots to the additional Regions

E. Schedule Amazon EC2 Image Builder to run once daily to create an AMI and copy the AMI to the additional Regions

View answer

Correct Answer: C

Question #6

An online e-commerce business is running a workload on AWS. The application architecture includes a web tier, an application tier for business logic, and a database tier for user and transactional data management. The database server has a 100 GB memory requirement. The business requires cost-efficient disaster recovery for the application with an RTO of 5 minutes and an RPO of 1 hour. The business also has a regulatory requirement for out-of-region disaster recovery with a minimum distance between the prim

A. Back up the application and database data frequently and copy them to Amazon S3

B. Employ a pilot light environment in which the primary database is configured with mirroring to build a standby database on m4

C. Use AWS Cloud Formation to instantiate the web servers, application servers, and load balancers in case of a disaster to bring the application up in the alternate regio

D. Vertically resize the database to meet the full production demands, and use Amazon Route 53 to switch traffic to the alternate region

E. Use a scaled-down version of the fully functional production environment in the alternate region that includes one instance of the web server, one instance of the application server, and a replicated instance of the database server in standby mod

F. Place the web and the application tiers in an Auto Scaling group behind a load balancer, which can automatically scale when the load arrives to the applicatio G

View answer

Correct Answer: D

Question #7

A company is developing a new service that will be accessed using TCP on a static port A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name myservice.com, which is publicly accessible The service must use fixed address assignments so other companies can add the addresses to their allow lists. Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these r

A. Create Amazon EC2 instances with an Elastic IP address for each instance Create a Network Load Balancer (NLB) and expose the static TCP port Register EC2instances with the NLB Create a new name server record set named my service com, and assign the Elastic IP addresses of the EC2 instances to the record set Provide the Elastic IP addresses of the EC2 instances to the other companies to add to their allow lists

B. Create an Amazon ECS cluster and a service definition for the application Create and assign public IP addresses for the ECS cluster Create a Network Load Balancer (NLB) and expose the TCP port Create a target group and assign the ECS cluster name to the NLB Create a new A record set named my service com and assign the public IP addresses of the ECS cluster to the record set Provide the public IP addresses of the ECS cluster to the other companies to add to their allow lists

C. Create Amazon EC2 instances for the service Create one Elastic IP address for each Availability Zone Create a Network Load Balancer (NLB) and expose the assigned TCP port Assign the Elastic IP addresses to the NLB for each Availability Zone Create a target group and register the EC2 instances with the NLB Create a new A (alias) record set named my service com, and assign the NLB DNS name to the record set

D. Create an Amazon ECS cluster and a service definition for the application Create and assign public IP address for each host in the cluster Create an Application Load Balancer (ALB) and expose the static TCP port Create a target group and assign the ECS service definition name to the ALB Create a new CNAME record set and associate the public IP addresses to the record set Provide the Elastic IP addresses of the Amazon EC2 instances to the other companies to add to their allow lists

View answer

Correct Answer: A

Question #8

A company operates quick-service restaurants. The restaurants follow a predictable model with high sales traffic for -4 hours daily Sates traffic is lower outside of those peak hours. The point of sale and management platform is deployed in the AWS Cloud and has a backend that is based or Amazon DynamoDB The database table uses provisioned throughput mode with 100.000 RCUs and 80.000 WCUs to match Known peak resource consumption. The company wants to reduce its DynamoDB cost and minimize the operational ove

A. Reduce the provisioned RCUs and WCUs

B. Change the DynamoDB table to use on-demand capacity

C. Enable Dynamo DB auto seating for the table

D. Purchase 1-year reserved capacity that is sufficient to cover the peak load for 4 hours each day

View answer

Correct Answer: B

Question #9

A company is creating a sequel for a popular online game. A large number of users from all over the world will play the game within the first week after launch. Currently, the game consists of the following components deployed in a single AWS Region: ? Amazon S3 bucket that stores game assets ? Amazon DynamoDB table that stores player scores A solutions architect needs to design a Region solution that wifi reduce latency improve reliability, and require the least effort to implement What should the solution

A. Create an Amazon CloudFront distribution to serve assets from the S3 bucket Configure S3Cross-Region Replication Create a new DynamoDB able in a new Region Use the new table as a replica target tor DynamoDB global tables

B. Create an Amazon CloudFront distribution to serve assets from the S3 bucke

C. Configure S3Same-Region Replicatio

D. Create a new DynamoDB able m a new Regio

E. Configure asynchronous replication between the DynamoDB tables by using AWS Database Migration Service (AWS DMS) with change data capture (CDC)

F. Create another S3 bucket in a new Region and configure S3 Cross-Region Replication between the buckets Create an Amazon CloudFront distribution and configure origin failover with two origins accessing the S3 buckets in each Regio G

View answer

Correct Answer: D

Question #10

A company has an application Once a month, the application creates a compressed file that contains every object within an Amazon S3 bucket The total size of the objects before compression is 1 TB. The application runs by using a scheduled cron job on an Amazon EC2 instance that has a 5 TB Amazon Elastic Block Store (Amazon EBS) volume attached The application downloads all the files from the source S3 bucket to the EBS volume, compresses the file, and uploads the file to a target S3 bucket Every invocation

A. Migrate the application to run an AWS Lambda function Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the Lambda function to run once each month

B. Configure the application to download the source files by using streams Direct the streams into a compression library Direct the output of the compression library into a target object in Amazon S3

C. Configure the application to download the source files from Amazon S3 and save the files to local storage Compress the files and upload them to Amazon S3

D. Configure the application to run as a container in AWS Fargate Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the task to run once each month

E. Provision an Amazon Elastic File System (Amazon EFS) file system Attach the file system to the AWS Lambda function

View answer

Correct Answer: B

Question #11

A company that uses AWS Organizations is creating several new AWS accounts. The company is setting up controls to properly allocate AWS costs to business units. The company must Implement a solution to ensure that all resources include a tag that has a key of costcenter and a value from a predefined list of business units. The solution must send a notification each time a resource tag does not meet these criteria. The solution must not prevent the creation of resources. Which solution will meet these requir

A. Create an 1AM policy for all actions that create AWS resource

B. Add a condition to the policy that aws:RequestTag/costcenter must exist and must contain a valid business unit valu

C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that monitors 1AM service events and Amazon EC2 service events for noncompliant tag policie

D. Configure the rule to send notifications through Amazon Simple Notification Service (Amazon SNS)

E. Create an 1AM policy for all actions that create AWS resource

F. Add a condition to the policy that awsResourceTag/costcenter must exist and must contain avalid business unit value Create an Amazon EventBridge (Amazon CloudWatch Events) rule that monitors 1AM service events and Amazon EC2 service events for noncompliant tag policie G

View answer

Correct Answer: CE

Question #12

A company is migrating applications from on premises to the AWS Cloud. These applications power the company's internal web forms. These web forms collect data for specific events several times each quarter. The web forms use simple SQL statements to save the data to a local relational database. Data collection occurs for each event, and the on-premises servers are idle most of the time. The company needs to minimize the amount of idle infrastructure that supports the web forms. Which solution will meet thes

A. Use Amazon EC2 Image Builder to create AMIs for the legacy server

B. Use the AMIs to provision EC2 instances to recreate the applications in the AWS

C. Place an Application Load Balancer (ALB) in front of the EC2 instance

D. Use Amazon Route 53 to point the DNS names of the web forms to the ALB

E. Create one Amazon DynamoDB table to store data for all the data input Use the application form name as the table key to distinguish data item

F. Create an Amazon Kinesis data stream to receive the data input and store the input in DynamoD G

View answer

Correct Answer: D

Question #13

A solutions architect is designing an application to accept timesheet entries from employees on their mobile devices. Timesheets will be submitted weekly, with most of the submissions occurring on Friday. The data must be stored in a format that allows payroll administrators to run monthly reports. The infrastructure must be highly available and scale to match the rate of incoming data and reporting requests. Which combination of steps meets these requirements while minimizing operational overhead? (Select

A. Deploy the application to Amazon EC2 On-Demand Instances With load balancing across multiple Availability Zone

B. Use scheduled Amazon EC2 Auto Scaling to add capacity before the high volume of submissions on Fridays

C. Deploy the application in a container using Amazon Elastic Container Service (Amazon ECS) with load balancing across multiple Availability Zone

D. Use scheduled Service Auto Scaling to add capacity before the high volume of submissions on Fridays

E. Deploy the application front end to an Amazon S3 bucket served by Amazon CloudFron

F. Deploy the application backend using Amazon API Gateway with an AWS Lambda proxy integration

View answer

Correct Answer: B

Question #14

A company is creating a sequel for a popular online game. A large number of users from all over the world will play the game within the first week after launch. Currently, the game consists of the following components deployed in a single AWS Region: ? Amazon S3 bucket that stores game assets ? Amazon DynamoDB table that stores player scores A solutions architect needs to design a multi-Region solution that will reduce latency improve reliability, and require the least effort to implement What should the so

A. Create an Amazon CloudFront distribution to serve assets from the S3 bucket Configure S3Cross-Region Replication Create a new DynamoDB able in a new Region Use the new table as a replica target tor DynamoDB global tables

B. Create an Amazon CloudFront distribution to serve assets from the S3 bucke

C. Configure S3Same-Region Replicatio

D. Create a new DynamoDB able m a new Regio

E. Configure asynchronous replication between the DynamoDB tables by using AWS Database Migration Service (AWS DMS) with change data capture (CDC)

F. Create another S3 bucket in a new Region and configure S3 Cross-Region Replication between the buckets Create an Amazon CloudFront distribution and configure origin failover with two origins accessing the S3 buckets in each Regio G

View answer

Correct Answer: AC

Question #15

A solutions architect needs to implement a client-side encryption mechanism for objects that will be stored in a new Amazon S3 bucket. The solutions architect created a CMK that is stored in AWS Key Management Service (AWS KMS) for this purpose. The solutions architect created the following IAM policy and attached it to an IAM role: During tests, me solutions architect was able to successfully get existing test objects m the S3 bucket However, attempts to upload a new object resulted in an error message. Th

A. Kms:GenerateDataKey

B. KmsGetKeyPolpcy

C. kmsGetPubKKey

D. kms:SKjn

View answer

Correct Answer: AC

Question #16

A media company uses Amazon DynamoDB to store metadata for its catalog of movies that are available to stream. Each media item Contains user-facing content that concludes a description of the media, a list of search tags, and similar data. In addition, media items include a list of Amazon S3 key names that relate to movie files. The company stores these movie files in a single S3 bucket that has versioning enable. The company uses Amazon CloudFront to serve these movie files. The company has 100.000 media i

A. Configure the dynamoDB table with a TTL fiel

B. Create and invoke an AWS Lambda function to perform a conditional update Set the TTL field to the time of the contract's expiration on every affected media item

C. Configure an S3 Lifecycle object expiration rule that is based on the contract's expiration date

D. Write a script to perform a conditional delete on all the affected DynamoDB records

E. Temporarily suspend versioning on the S3 bucke

F. Create and invoke an AWS Lambda function that deletes affected objects Reactivate versioning when the operation is complete G

View answer

Correct Answer: B

Question #17

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The company's CIO has asked a solutions architect to design a simple, highly available, and loosely coupled order processing application. The application is responsible (or receiving and processing orders before storing them in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale during markeling campaigns to process the orders with minimal delays. Which of the follow

A. Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them

B. Receive the orders in an Amazon SOS queue and trigger an AWS Lambda function lo process them

C. Receive the orders using the AWS Step Functions program and trigger an Amazon ECS container lo process them

D. Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them

View answer

Correct Answer: B

Question #18

A company's solutions architect is reviewing a web application that runs on AWS. The application references static assets in an Amazon S3 bucket in the us-east-1 Region. The company needs resiliency across multiple AWS Regions. The company already has created an S3 bucket in a second Region. Which solution will meet these requirements with the LEAST operational overhead?

A. Configure the application to write each object to both S3 bucket

B. Set up an Amazon Route 53 public hosted zone with a record set by using a weighted routing policy for each S3 bucke

C. Configure the application to reference the objects by using the Route 53 DNS name

D. Create an AWS Lambda function to copy objects from the S3 bucket in us-east-1 to the S3 bucket in the second Regio

E. Invoke the Lambda function each time an object is written to the S3 bucket in us-east-1

F. Configure replication on the S3 bucket in us-east-1 to replicate objects to the S3 bucket in the second Region Set up an Amazon CloudFront distribution with an origin group that contains the two S3 bucketsas origins

View answer

Correct Answer: B

Question #19

A company is running a data-intensive application on AWS. The application runs on a cluster of hundreds of Amazon EC2 instances. A shared file system also runs on several EC2 instances that store 200 TB of data. The application reads and modifies the data on the shared file system and generates a report. The job runs once monthly, reads a subset of the files from the shared file system, and takes about 72 hours to complete. The compute instances scale in an Auto Scaling group, but the instances that host th

A. Migrate the data from the existing shared file system to an Amazon S3 bucket that uses the S3 Intelligent-Tiering storage clas

B. Before the job runs each month, use Amazon FSx for Lustre to create a new file system with the data from Amazon S3 by using lazy loadin

C. Use the new file system as the shared storage for the duration of the jo

D. Delete the file system when the job is complete

E. Migrate the data from the existing shared file system to a large Amazon Elastic Block Store (Amazon EBS) volume with Multi-Attach enable

F. Attach the EBS volume to each of the instances by using a user data script in the Auto Scaling group launch templat G

View answer

Correct Answer: B

Question #20

A company has used infrastructure as code (laC) to provision a set of two Amazon EC2 instances. The instances have remained the same tor several years. The company's business has grown rapidly in the past few months. In response, the company's operations team has implemented an Auto Scaling group to manage the sudden increases in traffic Company policy requires a monthly installation of security updates on all operating systems that are running. The most recent security update required a reboot. As a result

A. Modify the Auto Scaling group by setting the Update policy to target the oldest launch configuration for replacement

B. Create a new Auto Scaling group before the next patch maintenance During the maintenance window patch both groups and reboot the instances

C. Create an Elastic Load Balancer in front of the Auto Scaling group Configure monitoring to ensure that target group health checks return healthy after the Auto Scaling group replaces the terminated instances

D. Create automation scripts to patch an AM

E. update the launch configuration, and invoke an Auto Scaling instance refresh

F. Create an Elastic Load Balancer in front of the Auto Scaling group Configure termination protection on the instances

View answer

Correct Answer: B

Question #21

A company plans to migrate to AWS. A solutions architect uses AWS Application Discovery Service over the fleet and discovers that there is an Oracle data warehouse and several PostgreSQL databases. Which combination of migration patterns will reduce licensing costs and operational overhead? (Select TWO.)

A. Lift and shift the Oracle data warehouse to Amazon EC2 using AWS DMS

B. Migrate the Oracle data warehouse to Amazon Redshift using AWS SCT and AWS QMS

C. Lift and shift the PostgreSQL databases to Amazon EC2 using AWS DMS

D. Migrate the PostgreSQL databases to Amazon RDS for PostgreSQL using AWS DMS

E. Migrate the Oracle data warehouse to an Amazon EMR managed cluster using AWS DMS

View answer

Correct Answer: AE

Question #22

A company has implemented an ordering system using an event-dnven architecture. Dunng initial testing, the system stopped processing orders Further tog analysis revealed that one order message in an Amazon Simple Queue Service (Amazon SOS) standard queue was causing an error on the backend and blocking all subsequent order messages The visibility timeout of the queue is set to 30 seconds, and the backend processing timeout is set to 10 seconds. A solutions architect needs to analyze faulty order messages an

A. Increase the backend processing timeout to 30 seconds to match the visibility timeout

B. Reduce the visibility timeout of the queue to automatically remove the faulty message

C. Configure a new SOS FIFO queue as a dead-letter queue to isolate the faulty messages

D. Configure a new SOS standard queue as a dead-letter queue to isolate the faulty messages

View answer

Correct Answer: A

Question #23

A company used Amazon EC2 instances to deploy a web fleet to host a blog site The EC2 instances are behind an Application Load Balancer (ALB) and are configured in an Auto ScaSng group The web application stores all blog content on an Amazon EFS volume. The company recently added a feature 'or Moggers to add video to their posts, attracting 10 times the previous user traffic At peak times of day. users report buffering and timeout issues while attempting to reach the site or watch videos Which is the MOST c

A. Reconfigure Amazon EFS to enable maximum I/O

B. Update the Nog site to use instance store volumes tor storag

C. Copy the site contents to the volumes at launch and to Amazon S3 al shutdown

D. Configure an Amazon CloudFront distributio

E. Point the distribution to an S3 bucket, and migrate the videos from EFS to Amazon S3

F. Set up an Amazon CloudFront distribution for all site contents, and point the distribution at the ALB

View answer

Correct Answer: AD

Question #24

A company has automated the nightly retraining ot its machine learning models by using AWS Step Functions. The workflow consists of multiple steps that use AWS Lambda. Each step can fail for various reasons, and any failure causes a failure of the overall workflow. A review reveals that the retraining has failed multiple nights in a row without the company noticing the failure. A solutions architect needs to improve the workflow so that notifications are sent for all types of failures in the retraining proc

A. Create an Amazon Simple Notification Service {Amazon SNS) topic with a subscription of type"Email" that targets the team's mailing list

B. Create a task named "Email" that forwards the input arguments to the SNS topic

C. Add a Catch field to all Tas

D. Ma

E. and Parallel states that have a statement of "ErrorEquals": [ "states

F. Add a new email address to Amazon Simple Email Service (Amazon SES)

View answer

Correct Answer: B

Question #25

A developer reports receiving an Error 403: Access Denied message when they try to download an object from an Amazon S3 bucket. The S3 bucket is accessed using an S3 endpoint inside a VPC. and is encrypted with an AWS KMS key. A solutions architect has verified that (he developer is assuming the correct IAM role in the account that allows the object to be downloaded. The S3 bucket policy and the NACL are also valid. Which additional step should the solutions architect take to troubleshoot this issue?

A. Ensure that blocking all public access has not been enabled in the S3 bucket

B. Verify that the IAM rote has permission to decrypt the referenced KMS key

C. Verify that the IAM role has the correct trust relationship configured

D. Check that local firewall rules are not preventing access to the S3 endpoint

View answer

Correct Answer: C

Question #26

An ecommerce website running on AWS uses an Amazon RDS for MySQL DB instance with General Purpose SSD storage. The developers chose an appropriate instance type based on demand, and configured 100 GB of storage with a sufficient amount of free space. The website was running smoothly for a few weeks until a marketing campaign launched. On the second day of the campaign, users reported long wait times and time outs. Amazon CloudWatch metrics indicated that both reads and writes to the DB instance were experie

A. It exhausted the I/O credit balance due to provisioning low disk storage during the setup phase

B. It caused the data in the tables to change frequently, requiring indexes to be rebuilt to optimize queries

C. It exhausted the maximum number of allowed connections to the database instance

D. It exhausted the network bandwidth available to the RDS for MySQL DB instance

View answer

Correct Answer: B

Question #27

A gaming company created a game leaderboard by using a Multi-AZ deployment of an Amazon RDS database. The number of users is growing, and the queries to get individual player rankings are getting slower over time. The company expects a surge in users for an upcoming version and wants to optimize the design for scalability and performance. Which solution will meet these requirements?

A. Migrate the database to Amazon DynamoD

B. Store the leader different table

C. Use Apache HiveQL JOIN statements to build the leaderboard

D. Keep the leaderboard data in the RDS DB instanc

E. Provision a Multi-AZ deployment of an Amazon ElastiCache for Redis cluster

F. Stream the leaderboard data by using Amazon Kinesis Data Firehose with an Amazon S3 bucket as the destinatio G

View answer

Correct Answer: C

Question #28

A company is running a serverless application that consists of several AWS Lambda functions and Amazon DynamoDB tables. The company has created new functionality that requires the Lambda functions to access an Amazon Neptune DB cluster The Neptune DB cluster is located in three subnets in a VPC. Which of the possible solutions will allow the Lambda functions to access the Neptune DB cluster and DynamoDB tables? (Select TWO )

A. Create three public subnets in the Neptune VPC and route traffic through an interne: gateway Host theLambda functions m the three new public subnets

B. Create three private subnets in the Neptune VPC and route internet traffic through a NAT gateway Host the Lambda functions In the three new private subnets

C. Host the Lambda functions outside the VP

D. Update the Neptune security group to allow access from the IP ranges of the Lambda functions

E. Host the Lambda functions outside the VP

F. Create a VPC endpoint for the Neptune database, and have the Lambda functions access Neptune over the VPC endpoint G

View answer

Correct Answer: C

Question #29

The company needs to determine which costs on the monthly AWS bill are attributable to each application or team. The company also must be able to create reports to compare costs from the last 12 months and to help forecast costs for the next 12 months. A solutions architect must recommend an AWS Billing and Cost Management solution that provides these cost reports. Which combination of actions will meet these requirements? (Select THREE.)

A. Activate the user-defined cost allocation tags that represent the application and the team

B. Activate the AWS generated cost allocation tags that represent the application and the team

C. Create a cost category for each application in Billing and Cost Management

D. Activate IAM access to Billing and Cost Management

E. Create a cost budget

F. Enable Cost Explorer

View answer

Correct Answer: C

Question #30

A startup company recently migrated a large ecommerce website to AWS. The website has experienced a 70% increase in sales. Software engineers are using a private GitHub repository to manage code. The DevOps learn is using Jenkins for builds and unit testing. The engineers need to receive notifications for bad builds and zero downtime during deployments. The engineers also need to ensure any changes to production are seamless for users and can be rolled back in the event of a major issue. The software engine

A. Use GitHub websockets to trigger the CodePipeline pipelin

B. Use the Jenkins plugin for AWS CodeBuild to conduct unit testin

C. Send alerts to an Amazon SNS topic for any bad build

D. Deploy in an in-plac

E. all-at-once deployment configuration using AWS CodeDeploy

F. Use GitHub webhooks to trigger the CodePipeline pipelin G

View answer

Correct Answer: B

Question #31

A company has a web application that allows users to upload short videos. The videos are stored on Amazon EBS volumes and analyzed by custom recognition software for categorization. The website contains stat c content that has variable traffic with peaks in certain months. The architecture consists of Amazon EC2 instances running in an Auto Scaling group for the web application and EC2 instances running in an Auto Scaling group to process an Amazon SQS queue The company wants to re-architect the application

A. Use Amazon ECS containers for the web application and Spot Instances for the Auto Scaling group that processes the SQS queu

B. Replace the custom software with Amazon Recognition to categorize the videos

C. Store the uploaded videos n Amazon EFS and mount the file system to the EC2 instances for Te web applicatio

D. Process the SOS queue with an AWS Lambda function that calls the Amazon Rekognition API to categorize the videos

E. Host the web application in Amazon S3

F. Use AWS Elastic Beanstalk to launch EC2 instances in an Auto Scaling group for the web application and launch a worker environment to process the SQS queue Replace the custom software with Amazon Rekognition to categorize the videos

View answer

Correct Answer: D

Question #32

A solutions architect is working with a company that is extremely sensitive to its IT costs and wishes to implement controls that will result in a predictable AWS spend each month Which combination ot steps can help the company control and monitor its monthly AWS usage to achieve a cost that is as close as possible to the target amount? (Select THREE.)

A. Implement an IAM policy that requires users to specify a 'workload' tag for cost allocation when launching Amazon EC2 instances

B. Contact AWS Support and ask that they apply limits to the account so that users are not able to launch more than a certain number of instance types

C. Purchase all upfront Reserved Instances that cover 100% of the account's expected Amazon EC2 usage

D. Place conditions in the users' IAM policies that limit the number of instances they are able to launch

E. Define 'workload' as a cost allocation tag in the AWS Billing and Cost Management console

F. Set up AWS Budgets to alert and notify when a given workload is expected to exceed a defined cost

View answer

Correct Answer: D

Question #33

A company is using an Amazon EMR cluster to run its big data jobs The cluster's jobs are invoked by AWS Step Functions Express Workflows that consume various Amazon Simple Queue Service (Amazon SQS) queues The workload of this solution is variable and unpredictable Amazon CloudWatch metrics show that the cluster's peak utilization is only 25% at times and that the cluster sits idle the rest of the time A solutions architect must optimize the costs of the cluster without negatively impacting the time it take

A. Modify the EMR cluster by turning on automatic scaling of the core nodes and task nodes with a custom policy that is based on cluster utilization Purchase Reserved Instance capacity to cover the master node

B. Modify the EMR cluster to use an instance fleet of Dedicated On-Demand Instances for the master node and core nodes, and to use Spot Instances for the task node

C. Define target capacity for each node type to cover the load

D. Purchase Reserved Instances for the master node and core nodes Terminate all existing task nodes in the EMR cluster

E. Modify the EMR cluster to use capacity-optimized Spot Instances and a diversified task flee

F. Define target capacity for each node type with a mix of On-Demand Instances and Spot Instances

View answer

Correct Answer: AEF

Question #34

A company needs to create and manage multiple AWS accounts for a number of departments from a central location. The security team requires read-only access to all accounts from its own AWs account. The company is using AWS Organizations and created an account tor the security team. How should a solutions architect meet these requirements?

A. Use the OrganizationAccountAccessRole IAM role to create a new IAM policy wilh read-only access in each member accoun

B. Establish a trust relationship between the IAM policy in each member account and the security accoun

C. Ask the security team lo use the IAM policy to gain access

D. Use the OrganizationAccountAccessRole IAM role to create a new IAM role with read-only access in each member accoun

E. Establish a trust relationship between the IAM role in each member account and the security accoun

F. Ask the security team lo use the IAM role to gain access

View answer

Correct Answer: CE

Question #35

A company uses AWS Organizations to manage more than 1.000 AWS accounts. The company has created a new developer organization. There are 540 developer member accounts that must be moved to the new developer organization All accounts are set up with all the required Information so mat each account can be operated as a standalone account Which combination of steps should a solutions architect take to move all of the developer accounts to the new developer organization? (Select THREE )

A. Call the MoveAccount operation In the Organizations API from the old organization's management account to migrate the developer accounts to the new developer organization

B. From the management account remove each developer account from the old organization using the RemoveAccountFromOrganization operation in the Organizations API

C. From each developer account, remove the account from the old organization using the RemoveAccounrFromOrganization operation in the Organizations API

D. Sign in to the new developer organization's management account and create a placeholder member account that acts as a target for the developer account migration

E. Call the InviteAccountToOrganzation operation in the Organizations API from the new developer organization's management account to send invitations to the developer accounts

F. Have each developer sign in to their account and confirm to join the new developer organization

View answer

Correct Answer: D

Question #36

A company is planning on hosting its ecommerce platform on AWS using a multi-tier web application designed for a NoSQL database. The company plans to use the us-west-2 Region as its primary Region. The company want to ensure that copies of the application and data are available in a second Region, us-west-1, for disaster recovery. The company wants to keep the time to fail over as low as possible. Failing back to the primary Region should be possible without administrative interaction after the primary serv

A. Use AWS Cloud Formation StackSets lo create the stacks in both Regions with Auto Scaling groups for the web and application tier

B. Asynchronously replicate static content between Regions using Amazon S3 cross-Region replicatio

C. Use an Amazon Route 53 DNS failover routing policy to direct users to the secondary site in us-west-1 in the event of an outag

D. Use Amazon DynamoDB global tables for the database tier

E. Use AWS Cloud Formation StackSets to create the stacks in both Regions with Auto Scaling groups for the web and application tier

F. Asynchronously replicate static content between Regions using AmazonS3 cross-Region replicatio G

View answer

Correct Answer: CDE

Question #37

A finance company is running its business-critical application on current-generation Linux EC2 instances The application includes a self-managed MySQL database performing heavy I/O operations. The application is working fine to handle a moderate amount of traffic during the month. However, it slows down during the final three days of each month due to month-end reporting, even though the company is using Elastic Load Balancers and Auto Scaling within its infrastructure to meet the increased demand. Which of

A. Pre-warming Elastic Load Balancers, using a bigger instance type, changing all Amazon EBS volumes to GP2 volumes

B. Performing a one-time migration of the database cluster to Amazon RD

C. and creating several additional read replicas to handle the load during end of month

D. Using Amazon CioudWatch with AWS Lambda to change the typ

E. size, or IOPS of Amazon EBS volumes in the cluster based on a specific CloudWatch metric

F. Replacing all existing Amazon EBS volumes with new PIOPS volumes that have the maximum available storage size and I/O per second by taking snapshots before the end of the month and reverting back afterwards

View answer

Correct Answer: BD

Question #38

A company has an organization that has many AWS accounts in AWS Organizations A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization. The company has a common set of IP CIDR ranges in an allow list in each AWS account lo allow access to and from the company's on-premises network Developers within each account are responsible for adding new IP CIDR ranges to their security groups. The security team has its own AWS account. Currently, th

A. Set up an Amazon Simple Notification Service (Amazon SNS) topic in the security team's AWS account Deploy an AWS Lambda function in each AWS account Configure the Lambda function to run every time an SNS topic receives a message Configure the Lambda function to take an IP address as input and add it to a list of security groups in the account Instruct the security team to distribute changes by publishing messages to its SNS topic

B. Create new customer-managed prefix lists in each AWS account within the organization Populate theprefix lists in each account with all internal CIDR ranges Notify the owner of each AWS account to allow the new customer-managed prefix list IDs in their accounts in their security groups Instruct the security team to share updates with each AWS account owner

C. Create a new customer-managed prefix list in the security team's AWS account Populate thecustomer-managed prefix list with all internal CIDR range

D. Share the customer-managed prefix list

View answer

Correct Answer: A

Question #39

A company Is serving files to its customers through an SFTP server that Is accessible over the internet The SFTP server Is running on a single Amazon EC2 instance with an Elastic IP address attached Customers connect to the SFTP server through its Elastic IP address and use SSH for authentication The EC2 instance also has an attached security group that allows access from all customer IP addresses. A solutions architect must implement a solution to improve availability minimize the complexity ot infrastruct

A. Disassociate the Elastic IP address from me EC2 instance Create an Amazon S3 bucket to be used for sftp file hosting Create an AWS Transfer Family server Configure the Transfer Family server with a publicly accessible endpoin

B. Associate the SFTP Elastic IP address with the new endpoin

C. Point the Transfer Family server to the S3 bucket Sync all files from the SFTP server to the S3 bucket

D. Disassociate the Elastic IP address from the EC2 instanc

E. Create an Amazon S3 bucket to be used for SFTP file hosting Create an AWS Transfer Family serve

F. Configure the Transfer Family server with a VPC-hoste G

View answer

Correct Answer: B

Question #40

A company is migrating its marketing website and content management system from an on-premises data center to AWS. The company wants the AWS application to be deployed in a VPC with Amazon EC2 instances used for the web servers and an Amazon RDS instance for the database. The company has a runbook document that describes the installation process of the on-premises system. The company would like to base the AWS system on the processes referenced in the runbook document. The runbook document describes the ins

A. Update the runbook to describe how to create the VP

B. the EC2 instances and the RDS instance for the application by using the AWS Console Make sure that the rest of the steps in the runbook are updated to reflect any changes that may come from the AWS migration

C. Write a Python script that uses the AWS API to create the VP

D. the EC2 instances and the RDS instance for the application Write shell scripts that implement the rest of the steps in the runbook Have the Python script copy and run the shell scripts on the newly created instances to complete the installation

E. Write an AWS Cloud Formation template that creates the VPC, the EC2 instances, and the RDS instance for the application Ensure that the rest of the steps in the runbook are updated to reflect any changes that may come from the AWS migration

F. Write an AWS CloudFormation template that creates the VPC the EC2 instances, and the RDS instance for the application Include EC2 user data in the AWS Cloud Formation template to install and configure the software

View answer

Correct Answer: ACF

Question #41

A company has an Amazon VPC that is divided into a public subnet and a pnvate subnet. A web application runs in Amazon VPC. and each subnet has its own NACL The public subnet has a CIDR of 10.0.0 0/24 An Application Load Balancer is deployed to the public subnet The private subnet has a CIDR of 10.0.1.0/24. Amazon EC2 instances that run a web server on port 80 are launched into the private subnet Onty network traffic that is required for the Application Load Balancer to access the web application can be all

A. An inbound rule for port 80 from source 0

B. An inbound rule for port 80 from source 10

C. An outbound rule for port 80 to destination 0

D. An outbound rule for port 80 to destination 10

E. An outbound rule for ports 1024 through 65535 to destination 10

View answer

Correct Answer: B

Question #42

A development team s Deploying new APIs as serverless applications within a company. The team is currently using the AWS Maragement Console to provision Amazon API Gateway. AWS Lambda, and Amazon DynamoDB resources A solutions architect has been tasked with automating the future deployments of these serveriess APIs How can this be accomplished?

A. Use AWS CloudFonTiation with a Lambda-backed custom resource to provision API Gateway Use the MfS: :OynMoDB::Table and AWS::Lambda::Function resources to create the Amazon DynamoOB table and Lambda functions Write a script to automata the deployment of the CloudFormation template

B. Use the AWS Serverless Application Model to define the resources Upload a YAML template and application files to the code repository Use AWS CodePipeline to conned to the code repository and to create an action to build using AWS CodeBuil

C. Use the AWS CloudFormabon deployment provider m CodePipeline to deploy the solution

D. Use AWS CloudFormation to define the serverless applicatio

E. Implement versioning on the Lambda functions and create aliases to point to the version

F. When deploying, configure weights to implement shifting traffic to the newest version, and gradually update the weights as traffic moves over G

View answer

Correct Answer: D

Question #43

A company is running a two-tier web-based application in an on-premises data center. The application layer consists of a single server running a stateful application. The application connects to a PostgreSQL database running on a separate server The application's user base is expected to grow significantly, so the company is migrating the application and database to AWS The solution will use Amazon Aurora PostgreSQL. Amazon EC2 Auto Scaling, and Elastic Load Balancing. Which solution will provide a consiste

A. Enable Aurora Auto Scaling for Aurora Replica

B. Use a Network Load Balancer with the least outstanding requests routing algorithm and sticky sessions enabled

C. Enable Aurora Auto Scaling for Aurora writer

D. Use an Application Load Balancer with the round robin routing algorithm and sticky sessions enabled

E. Aurora Auto Scaling for Aurora Replica

F. Use an Application Load Balancer with the round robin routing algorithm and sticky sessions enabled

View answer

Correct Answer: AC

Question #44

A company is running an Apache Hadoop cluster on Amazon EC2 instances. The Hadoop cluster stores approximately 100 TB of data for weekly operational reports and allows occasional access for data scientists to retrieve data. The company needs to reduce the cost and operational complexity for storing and serving this data. Which solution meets these requirements in the MOST cost-effective manner?

A. Move the Hadoop cluster from EC2 instances to Amazon EM

B. Allow data access patterns to remain the same

C. Write a script that resizes the EC2 instances to a smaller instance type during downtime and resizes the instances to a larger instance type before the reports are created

D. Move the data to Amazon S3 and use Amazon Athena to query the data for report

E. Allow the data scientists to access the data directly in Amazon S3

F. Migrate the data to Amazon DynamoDB and modify the reports to fetch data from DynamoD G

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Master SAP-C02 Exams with Exam Questions & Study Materials, AWS Certified Solutions Architect - Professional | SPOTO

View The Updated SAP-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Master SAP-C02 Exams with Exam Questions & Study Materials, AWS Certified Solutions Architect - Professional | SPOTO

View The Updated SAP-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now