Amazon SAP-C02 Exam Dumps

Amazon SAP-C02 Sample Question Answers

Amazon SAP-C02 Sample Questions

Question # 1

A startup company recently migrated a large ecommerce website to AWS The website hasexperienced a 70% increase in sates Software engineers are using a private GitHubrepository to manage code The DevOps team is using Jenkins for builds and unit testingThe engineers need to receive notifications for bad builds and zero downtime duringdeployments The engineers also need to ensure any changes to production are seamlessfor users and can be rolled back in the event of a major issueThe software engineers have decided to use AWS CodePipeline to manage their build anddeployment processWhich solution will meet these requirements'?

A. Use GitHub websockets to trigger the CodePipeline pipeline Use the Jenkins plugin forAWS CodeBuild to conduct unit testing Send alerts to an Amazon SNS topic for any badbuilds Deploy in an in-place all-at-once deployment configuration using AWS CodeDeploy
B. Use GitHub webhooks to trigger the CodePipelme pipeline Use the Jenkins plugin forAWS CodeBuild to conduct unit testing Send alerts to an Amazon SNS topic for any bad builds Deploy in a blue'green deployment using AWS CodeDeploy
C. Use GitHub websockets to trigger the CodePipelme pipeline. Use AWS X-Ray for unittesting and static code analysis Send alerts to an Amazon SNS topic for any bad buildsDeploy in a blue/green deployment using AWS CodeDeploy.
D. Use GitHub webhooks to trigger the CodePipeline pipeline Use AWS X-Ray for unittesting and static code analysis Send alerts to an Amazon SNS topic for any bad buildsDeploy in an m-place. all-at-once deployment configuration using AWS CodeDeploy

Answer: B

Show Answer

Question # 2

To abide by industry regulations, a solutions architect must design a solution that will storea company's critical data in multiple public AWS Regions, including in the United States,where the company's headquarters is located The solutions architect is required to provideaccess to the data stored in AWS to the company's global WAN network The security teammandates that no traffic accessing this data should traverse the public internetHow should the solutions architect design a highly available solution that meets therequirements and is cost-effective'?

A. Establish AWS Direct Connect connections from the company headquarters to all AWSRegions in use the company WAN to send traffic over to the headquarters and then to the respective DX connection to access the data
B. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use inter-regionVPC peering to access the data in other AWS Regions
C. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use an AWStransit VPC solution to access data in other AWS Regions
D. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use DirectConnect Gateway to access data in other AWS Regions.

Answer: D

Show Answer

Question # 3

A company has developed a new release of a popular video game and wants to make itavailable for public download The new release package is approximately 5 GB in size. Thecompany provides downloads for existing releases from a Linux-based publicly facing FTPsite hosted in an on-premises data center The company expects the new release will bedownloaded by users worldwide The company wants a solution that provides improveddownload performance and low transfer costs regardless of a user's locationWhich solutions will meet these requirements'?

A. Store the game files on Amazon EBS volumes mounted on Amazon EC2 instanceswithin an Auto Scaling group Configure an FTP service on the EC2 instances Use anApplication Load Balancer in front of the Auto Scaling group. Publish the game downloadURL for users to download the package
B. Store the game files on Amazon EFS volumes that are attached to Amazon EC2instances within an Auto Scaling group Configure an FTP service on each of the EC2instances Use an Application Load Balancer in front of the Auto Scaling group Publish thegame download URL for users to download the package
C. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting Upload thegame files to the S3 bucket Use Amazon CloudFront for the website Publish the gamedownload URL for users to download the package
D. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting Upload thegame files to the S3 bucket Set Requester Pays for the S3 bucket Publish the game download URL for users to download the package

Answer: C

Show Answer

Question # 4

A company runs an application in (he cloud that consists of a database and a websiteUsers can post data to the website, have the data processed, and have the data sent backto them in an email Data is stored in a MySQL database running on an Amazon EC2instance The database is running in a VPC with two private subnets The website is runningon Apache Tomcat in a single EC2 instance in a different VPC with one public subnetThere is a single VPC peering connection between the database and website VPC. The website has suffered several outages during the last month due to high trafficWhich actions should a solutions architect take to increase the reliability of the application?(Select THREE.)

A. Place the Tomcat server in an Auto Scaling group with multiple EC2 instances behindan Application Load Balancer
B. Provision an additional VPC peering connection
C. Migrate the MySQL database to Amazon Aurora with one Aurora Replica
D. Provision two NAT gateways in the database VPC.
E. Move the Tomcat server to the database VPC
F. Create an additional public subnet in a different Availability Zone in the website VPC

Answer: A,C,F

Show Answer

Question # 5

A company provides a centralized Amazon EC2 application hosted in a single shared VPCThe centralized application must be accessible from client applications running in the VPCsof other business units The centralized application front end is configured with a NetworkLoad Balancer (NLB) for scalability Up to 10 business unit VPCs will need to be connected to the shared VPC Some ot thebusiness unit VPC CIDR blocks overlap with the shared VPC and some overlap with eachother Network connectivity to the centralized application in the shared VPC should beallowed from authorized business unit VPCs onlyWhich network configuration should a solutions architect use to provide connectivity fromthe client applications in the business unit VPCs to the centralized application in the sharedVPC?

A. Create an AWS Transit Gateway Attach the shared VPC and the authorized businessunit VPCs to the transit gateway Create a single transit gateway route table and associateit with all of the attached VPCs Allow automatic propagation of routes from the attachmentsinto the route table Configure VPC routing tables to send traffic to the transit gateway
B. Create a VPC endpoint service using the centralized application NLB and enable theoption to require endpoint acceptance Create a VPC endpoint in each of the business unitVPCs using the service name of the endpoint service. Accept authorized endpoint requestsfrom the endpoint service console.
C. Create a VPC peering connection from each business unit VPC to the shared VPCAccept the VPC peering connections from the shared VPC console Configure VPC routingtables to send traffic to the VPC peering connection
D. Configure a virtual private gateway for the shared VPC and create customer gatewaysfor each of the authorized business unit VPCs Establish a Site-to-Site VPN connection fromthe business unit VPCs to the shared VPC Configure VPC routing tables to send traffic tothe VPN connection

Answer: B

Show Answer

Question # 6

An events company runs a ticketing platform on AWS. The company's customers configureand schedule their events on the platform The events result in large increases of traffic tothe platform The company knows the date and time of each customer's eventsThe company runs the platform on an Amazon Elastic Container Service (Amazon ECS)cluster The ECS cluster consists of Amazon EC2 On-Demand Instances that are in an AutoScaling group. The Auto Scaling group uses a predictive scaling policyThe ECS cluster makes frequent requests to an Amazon S3 bucket to download ticketassets The ECS cluster and the S3 bucket are in the same AWS Region and the sameAWS account Traffic between the ECS cluster and the S3 bucket flows across a NATgatewayThe company needs to optimize the cost of the platform without decreasing the platform'savailabilityWhich combination of steps will meet these requirements? (Select TWO)

A. Create a gateway VPC endpoint for the S3 bucket
B. Add another ECS capacity provider that uses an Auto Scaling group of Spot InstancesConfigure the new capacity provider strategy to have the same weight as the existingcapacity provider strategy
C. Create On-Demand Capacity Reservations for the applicable instance type for the timeperiod of the scheduled scaling policies
D. Enable S3 Transfer Acceleration on the S3 bucket
E. Replace the predictive scaling policy with scheduled scaling policies for the scheduled events

Answer: A,B

Show Answer

Question # 7

A company uses AWS Organizations to manage its development environment. Eachdevelopment team at the company has its own AWS account Each account has a singleVPC and CIDR blocks that do not overlap.The company has an Amazon Aurora DB cluster in a shared services account All thedevelopment teams need to work with live data from the DB clusterWhich solution will provide the required connectivity to the DB cluster with the LEASToperational overhead?

A. Create an AWS Resource Access Manager (AWS RAM) resource share tor the DBcluster. Share the DB cluster with all the development accounts
B. Create a transit gateway in the shared services account Create an AWS ResourceAccess Manager (AWS RAM) resource share for the transit gateway Share the transitgateway with all the development accounts Instruct the developers to accept the resourceshare Configure networking.
C. Create an Application Load Balancer (ALB) that points to the IP address of the DBcluster Create an AWS PrivateLink endpoint service that uses the ALB Add permissions toallow each development account to connect to the endpoint service
D. Create an AWS Site-to-Site VPN connection in the shared services account Configurenetworking Use AWS Marketplace VPN software in each development account to connectto the Site-to-Site VPN connection

Answer: B

Show Answer

Question # 8

A company wants to migrate virtual Microsoft workloads from an on-premises data centerto AWS The company has successfully tested a few sample workloads on AWS. Thecompany also has created an AWS Site-to-Site VPN connection to a VPC A solutionsarchitect needs to generate a total cost of ownership (TCO) report for the migration of allthe workloads from the data centerSimple Network Management Protocol (SNMP) has been enabled on each VM in the datacenter The company cannot add more VMs m the data center and cannot install additionalsoftware on the VMs The discovery data must be automatically imported into AWSMigration HubWhich solution will meet these requirements?

A. Use the AWS Application Migration Service agentless service and the AWS MigrationHub Strategy Recommendations to generate the TCO report
B. Launch a Windows Amazon EC2 instance Install the Migration Evaluator agentlesscollector on the EC2 instance Configure Migration Evaluator to generate the TCO report
C. Launch a Windows Amazon EC2 instance. Install the Migration Evaluator agentlesscollector on the EC2 instance. Configure Migration Hub to generate the TCO report
D. Use the AWS Migration Readiness Assessment tool inside the VPC Configure MigrationEvaluator to generate the TCO report

Answer: A

Show Answer

Question # 9

A software as a service (SaaS) company provides a media software solution to customersThe solution is hosted on 50 VPCs across various AWS Regions and AWS accounts Oneof the VPCs is designated as a management VPC The compute resources in the VPCswork independently The company has developed a new feature that requires all 50 VPCs to be able tocommunicate with each other. The new feature also requires one-way access from eachcustomer's VPC to the company's management VPC The management VPC hosts acompute resource that validates licenses for the media software solutionThe number of VPCs that the company will use to host the solution will continue to increaseas the solution growsWhich combination of steps will provide the required VPC connectivity with the LEASToperational overhead'' (Select TWO.)

A. Create a transit gateway Attach all the company's VPCs and relevant subnets to thetransit gateway
B. Create VPC peering connections between all the company's VPCs
C. Create a Network Load Balancer (NLB) that points to the compute resource for licensevalidation. Create an AWS PrivateLink endpoint service that is available to each customer'sVPC Associate the endpoint service with the NLB
D. Create a VPN appliance in each customer's VPC Connect the company's managementVPC to each customer's VPC by using AWS Site-to-Site VPN
E. Create a VPC peering connection between the company's management VPC and eachcustomer's VPC

Answer: A,C

Show Answer

Question # 10

A company creates an AWS Control Tower landing zone to manage and govern a multiaccountAWS environment. The company's security team will deploy preventive controlsand detective controls to monitor AWS services across all the accounts. The security teamneeds a centralized view of the security state of all the accounts.Which solution will meet these requirements'?

A. From the AWS Control Tower management account, use AWS CloudFormationStackSets to deploy an AWS Config conformance pack to all accounts in the organization
B. Enable Amazon Detective for the organization in AWS Organizations Designate oneAWS account as the delegated administrator for Detective
C. From the AWS Control Tower management account, deploy an AWS CloudFormationstack set that uses the automatic deployment option to enable Amazon Detective for theorganization
D. Enable AWS Security Hub for the organization in AWS Organizations Designate oneAWS account as the delegated administrator for Security Hub

Answer: D

Show Answer

Question # 11

A medical company is running a REST API on a set of Amazon EC2 instances The EC2instances run in an Auto Scaling group behind an Application Load Balancer (ALB) TheALB runs in three public subnets, and the EC2 instances run in three private subnets Thecompany has deployed an Amazon CloudFront distribution that has the ALB as the only originWhich solution should a solutions architect recommend to enhance the origin security?

A. Store a random string in AWS Secrets Manager Create an AWS Lambda function forautomatic secret rotation Configure CloudFront to inject the random string as a customHTTP header for the origin request Create an AWS WAF web ACL rule with a string matchrule for the custom header Associate the web ACL with the ALB
B. Create an AWS WAF web ACL rule with an IP match condition of the CloudFront serviceIP address ranges Associate the web ACL with the ALB Move the ALB into the threeprivate subnets
C. Store a random string in AWS Systems Manager Parameter Store Configure ParameterStore automatic rotation for the string Configure CloudFront to inject the random string as acustom HTTP header for the origin request Inspect the value of the custom HTTP header,and block access in the ALB
D. Configure AWS Shield Advanced. Create a security group policy to allow connectionsfrom CloudFront service IP address ranges. Add the policy to AWS Shield Advanced, andattach the policy to the ALB

Answer: A

Show Answer

Question # 12

A company is running its solution on AWS in a manually created VPC. The company isusing AWS CloudFormation to provision other parts of the infrastructure According to anew requirement the company must manage all infrastructure in an automatic wayWhat should the comp any do to meet this new requirement with the LEAST effort?

A. Create a new AWS Cloud Development Kit (AWS CDK) stack that strictly provisions theexisting VPC resources and configuration Use AWS CDK to import the VPC into the stackand to manage the VPC
B. Create a CloudFormation stack set that creates the VPC Use the stack set to import theVPC into the stack
C. Create a new CloudFormation template that strictly provisions the existing VPCresources and configuration From the CloudFormation console, create a new stack byimporting the existing resources
D. Create a new CloudFormation template that creates the VPC Use the AWS ServerlessApplication Model (AWS SAM) CLI to import the VPC

Answer: C

Show Answer

Question # 13

A company is launching a new online game on Amazon EC2 instances. The game must beavailable globally. The company plans to run the game in three AWS Regions: us-east-1,eu-west-1, and ap-southeast-1. The game's leaderboards. player inventory, and eventstatus must be available across Regions.A solutions architect must design a solution that will give any Region the ability to scale tohandle the load of all Regions. Additionally, users must automatically connect to the Regionthat provides the least latency.Which solution will meet these requirements with the LEAST operational overhead?

A. Create an EC2 Spot Fleet. Attach the Spot Fleet to a Network Load Balancer (NLB) ineach Region. Create an AWS Global Accelerator IP address that points to the NLB. Createan Amazon Route 53 latency-based routing entry for the Global Accelerator IP address.Save the game metadata to an Amazon RDS for MySQL DB instance in each Region. Setup a read replica in the other Regions.
B. Create an Auto Scaling group for the EC2 instances. Attach the Auto Scaling group to aNetwork Load Balancer (NLB) in each Region. For each Region, create an Amazon Route53 entry that uses geoproximity routing and points to the NLB in that Region. Save thegame metadata to MySQL databases on EC2 instances in each Region. Save the gamemetadata to MySQL databases on EC2 instances in each Region. Set up replicationbetween the database EC2 instances in each Region.
C. Create an Auto Scaling group for the EC2 instances. Attach the Auto Scaling group to aNetwork Load Balancer (NLB) in each Region. For each Region, create an Amazon Route53 entry that uses latency-based routing and points to the NLB in that Region. Save thegame metadata to an Amazon DynamoDB global table.
D. Use EC2 Global View. Deploy the EC2 instances to each Region. Attach the instancesto a Network Load Balancer (NLB). Deploy a DNS server on an EC2 instance in eachRegion. Set up custom logic on each DNS server to redirect the user to the Region thatprovides the lowest latency. Save the game metadata to an Amazon Aurora globaldatabase.

Answer: C

Show Answer

Question # 14

A company is planning to migrate an application from on premises to the AWS Cloud Thecompany will begin the migration by moving the application underlying data storage toAWS The application data is stored on a shared tile system on premises and theapplication servers connect to the shared file system through SMBA solutions architect must implement a solution that uses an Amazon S3 bucket for sharedstorage. Until the application is fully migrated and code is rewritten to use native AmazonS3 APIs the application must continue to have access to the data through SMB Thesolutions architect must migrate the application data to AWS (o its new location while stillallowing the on-premises application to access the dataWhich solution will meet these requirements?

A. Create a new Amazon FSx for Windows File Server file system Configure AWSDataSync with one location for the on-premises file share and one location for the newAmazon FSx file system Create a new DataSync task to copy the data from the onpremisesfile share location to the Amazon FSx file system
B. Create an S3 bucket for the application Copy the data from the on-premises storage to the S3 bucket
C. Deploy an AWS Server Migration Service (AWS SMS) VM to the on-premisesenvironment Use AWS SMS to migrate the file storage server from on premises to anAmazon EC2 instance
D. Create an S3 bucket for the application Deploy a new AWS Storage Gateway filegateway on an on-premises VM Create a new file share that stores data in the S3 bucketand is associated with the file gateway Copy the data from the on-premises storage to thenew file gateway endpoint

Answer: D

Show Answer

Question # 15

A company has an application that analyzes and stores image data on premises Theapplication receives millions of new image files every day Files are an average of 1 MB insize The files are analyzed in batches of 1 GB When the application analyzes a batch theapplication zips the images together The application then archives the images as a singlefile in an on-premises NFS server for long-term storageThe company has a Microsoft Hyper-V environment on premises and has computecapacity available The company does not have storage capacity and wants to archive theimages on AWS The company needs the ability to retrieve archived data within t week of arequest.The company has a 10 Gbps AWS Direct Connect connection between its on-premisesdata center and AWS. The company needs to set bandwidth limits and schedule archivedimages to be copied to AWS dunng non-business hours.Which solution will meet these requirements MOST cost-effectively?

A. Deploy an AWS DataSync agent on a new GPU-based Amazon EC2 instance Configurethe DataSync agent to copy the batch of files from the NFS on-premises server to AmazonS3 Glacier Instant Retrieval After the successful copy delete the data from the on-premisesstorage
B. Deploy an AWS DataSync agent as a Hyper-V VM on premises Configure the DataSyncagent to copy the batch of files from the NFS on-premises server to Amazon S3 GlacierDeep Archive After the successful copy delete the data from the on-premises storage
C. Deploy an AWS DataSync agent on a new general purpose Amazon EC2 instanceConfigure the DataSync agent to copy the batch of files from the NFS on-premises serverto Amazon S3 Standard After the successful copy deletes the data from the on-premisesstorage Create an S3 Lifecycle rule to transition objects from S3 Standard to S3 GlacierDeep Archive after 1 day
D. Deploy an AWS Storage Gateway Tape Gateway on premises in the Hyper-Venvironment Connect the Tape Gateway to AWS Use automatic tape creation Specify anAmazon S3 Glacier Deep Archive pool Eject the tape after the batch of images is copied

Answer: B

Show Answer