09 April, 2022

A Review Of High Quality SAP-C01 Testing Material

Our pass rate is high to 98.9% and the similarity percentage between our SAP-C01 study guide and real exam is 90% based on our seven-year educating experience. Do you want achievements in the Amazon-Web-Services SAP-C01 exam in just one try? I am currently studying for the Amazon-Web-Services SAP-C01 exam. Latest Amazon-Web-Services SAP-C01 Test exam practice questions and answers, Try Amazon-Web-Services SAP-C01 Brain Dumps First.

Online SAP-C01 free questions and answers of New Version:

Page: 1 / 14

Total 179 questions Full Exam Access

Question 1

A Solutions Architect is designing the storage layer for a data warehousing application. The data files are large, but they have statically placed metadata at the beginning of each file that describes the size and placement of the file’s index. The data files are read in by a fleet of Amazon EC2 instances that store the index size, index location, and other category information about the data file in a database. That database is used by Amazon EMR to group files together for deeper analysis.
What would be the MOST cost-effective, high availability storage solution for this workflow?

Store the data files in Amazon S3 and use Range GET for each file’s metadata, then index the relevant data.

Store the data files in Amazon EFS mounted by the EC2 fleet and EMR nodes.

Store the data files on Amazon EBS volumes and allow the EC2 fleet and EMR to mount and unmount the volumes where they are needed.

Store the content of the data files in Amazon DynamoDB tables with the metadata, index, and data as their own keys.

Question 2

A three-tier web application runs on Amazon EC2 instances. Cron daemons are used to trigger scripts that collect the web server, application, and database logs and send them to a centralized location every hour. Occasionally, scaling events or unplanned outages have caused the instances to stop before the latest logs were collected, and the log files were lost.
Which of the following options is the MOST reliable way of collecting and preserving the log files?

Update the cron jobs to run every 5 minutes instead of every hour to reduce the possibility of log messages being lost in an outage.

Use Amazon CloudWatch Events to trigger Amazon Systems Manager Run Command to invoke the log collection scripts more frequently to reduce the possibility of log messages being lost in an outage.

Use the Amazon CloudWatch Logs agent to stream log messages directly to CloudWatch Logs.Configure the agent with a batch count of 1 to reduce the possibility of log messages being lost in an outage.

Use Amazon CloudWatch Events to trigger AWS Lambda to SSH into each running instance and invoke the log collection scripts more frequently to reduce the possibility of log messages being lost in an outage.

Question 3

A company has decided to move some workloads onto AWS to create a grid environment to run market analytics. The grid will consist of many similar instances, spun-up by a job-scheduling function. Each time a large analytics workload is completed, a new VPC is deployed along with job scheduler and grid nodes. Multiple grids could be running in parallel.
Key requirements are:
SAP-C01 dumps exhibit

Grid instances must communicate with Amazon S3 retrieve data to be processed.
SAP-C01 dumps exhibit

Grid instances must communicate with Amazon DynamoDB to track intermediate data,
SAP-C01 dumps exhibit

The job scheduler need only to communicate with the Amazon EC2 API to start new grid nodes.
A key requirement is that the environment has no access to the internet, either directly or via the on-premises proxy. However, the application needs to be able to seamlessly communicate to Amazon S3, Amazon DynamoDB, and Amazon EC2 API, without the need for reconfiguration for each new deployment.
Which of the following should the Solutions Architect do to achieve this target architecture? (Choose three.)

Enable VPC endpoints for Amazon S3 and DynamoDB.

Disable Private DNS Name Support.

Configure the application on the grid instances to use the private DNS name of the Amazon S3 endpoint.

Populate the on-premises DNS server with the private IP addresses of the EC2 endpoint.

Enable an interface VPC endpoint for EC2.

Configure Amazon S3 endpoint policy to permit access only from the grid nodes.

Question 5

An enterprise runs 103 line-of-business applications on virtual machines in an on-premises data center. Many of the applications are simple PHP, Java, or Ruby web applications, are no longer actively developed, and serve little traffic.
Which approach should be used to migrate these applications to AWS with the LOWEST infrastructure costs ?

Deploy the applications to single-instance AWS Elastic Beanstalk environments without a load balancer.

Use AWS SMS to create AMIs for each virtual machine and run them in Amazon EC2.

Convert each application to a Docker image and deploy to a small Amazon ECS cluster behind an Application Load Balancer.

Use VM Import/Export to create AMIs for each virtual machine and run them in single-instance AWS Elastic Beanstalk environments by configuring a custom image.

Question 6

A company is currently running a production workload on AWS that is very I/O intensive. Its workload consists of a single tier with 10 c4.8xlarge instances, each with 2 TB gp2 volumes. The number of processing jobs has recently increased, and latency has increased as well. The team realizes that they are constrained on the IOPS. For the application to perform efficiently, they need to increase the IOPS by 3,000 for each of the instances.
Which of the following designs will meet the performance goal MOST cost effectively?

Change the type of Amazon EBS volume from gp2 to io1 and set provisioned IOPS to 9,000.

Increase the size of the gp2 volumes in each instance to 3 TB.

Create a new Amazon EFS file system and move all the data to this new file syste

Mount this file system to all 10 instances.

Create a new Amazon S3 bucket and move all the data to this new bucke

Allow each instance to access this S3 bucket and use it for storage.

Question 7

A company has a High Performance Computing (HPC) cluster in its on-premises data center which runs thousands of jobs in parallel for one week every month, processing petabytes of images. The images are stored on a network file server, which is replicated to a disaster recovery site. The on-premises data center has reached capacity and has started to spread the jobs out over the course of month in order to better utilize the cluster, causing a delay in the job completion.
The company has asked its Solutions Architect to design a cost-effective solution on AWS to scale beyond the current capacity of 5,000 cores and 10 petabytes of data. The solution must require the least amount of management overhead and maintain the current level of durability.
Which solution will meet the company’s requirements?

Create a container in the Amazon Elastic Container Registry with the executable file for the jo

Use Amazon ECS with Spot Fleet in Auto Scaling group

Store the raw data in Amazon EBS SC1 volumes and write the output to Amazon S3.

Create an Amazon EMR cluster with a combination of On Demand and Reserved Instance Task Nodes that will use Spark to pull data from Amazon S3. Use Amazon DynamoDB to maintain a list of jobs that need to be processed by the Amazon EMR cluster.

Store the raw data in Amazon S3, and use AWS Batch with Managed Compute Environments to create Spot Fleet

Submit jobs to AWS Batch Job Queues to pull down objects from Amazon S3 onto Amazon EBS volumes for temporary storage to be processed, and then write the results back to Amazon S3.

Submit the list of jobs to be processed to an Amazon SQS to queue the jobs that need to be processed.Create a diversified cluster of Amazon EC2 worker instances using Spot Fleet that will automatically scale based on the queue dept

Use Amazon EFS to store all the data sharing it across all instances in the cluster.

Question 8

A company is running a high-user-volume media-sharing application on premises It currently hosts about 400 TB of data with millions of video files The company is migrating this application to AWS to improve reliability and reduce costs
The Solutions Architecture team plans to store the videos in an Amazon S3 bucket and use Amazon
CloudFront to distribute videos to users. The company needs to migrate this application to AWS within 10 days with the least amount of downtime possible. The company currently has 1 Gbps connectivity to the internet with 30 percent free capacity
Which of the following solutions would enable the company to migrate the workload to AWS and meet an of the requirements?

Use a multipart upload in Amazon S3 client at to parallel-upload the data to the Amazon S3 bucket over the internet Use the throttling feature to ensure that the Amazon S3 client does not use more than 30 percent of available internet capacity

Request an AWS Snowmobile with 1 PB capacity to be delivered to the data center Load the data into Snowmobile and send it back to have AWS download that data to the Amazon S3 bucket Sync the new data that was generated white migration was in flight

Use an Amazon S3 client to transfer data from the data center to the Amazon S3 bucket over the internet Use the throttling feature to ensure the Amazon S3 client does not use more than 30 percent of available internet capacity

Request multiple AWS Snowball devices to be delivered to the data center Load the data concurrently into these devices and send it back Have AWS download that data to the Amazon S3 bucket Sync the new data that was generated while migration was in flight.

Question 10

During a security audit of a Service team's application a Solutions Architect discovers that a username and password tor an Amazon RDS database and a set of AWSIAM user credentials can be viewed in the AWS Lambda function code. The Lambda function uses the username and password to run queries on the database and it uses the I AM credentials to call AWS services in a separate management account.
The Solutions Architect is concerned that the credentials could grant inappropriate access to anyone who can view the Lambda code The management account and the Service team's account are in separate AWS Organizations organizational units (OUs)
Which combination of changes should the Solutions Architect make to improve the solution's security? (Select TWO)

Configure Lambda to assume a tole in the management account with appropriate access to AWS

Configure Lambda to use the stored database credentials in AWS Secrets Manager and enable automatic rotation

Create a Lambda function to rotate the credentials every hour by deploying a new Lambda version with the updated credentials

Use an SCP on the management accounts OU to prevent IAM users from accessing resources m the Service team's account

Enable AWS Shield Advanced on the management account to shield sensitive resources from unauthorized IAM access

Question 11

A company runs an application on a fleet of Amazon EC2 instances The application requires low latency and random access to 100 GB of data The application must be able to access the data at up to 3.000 IOPS A Development team has configured the EC2 launch template to provision a 100-GB Provisioned IOPS (PIOPS) Amazon EBS volume with 3 000 IOPS provisioned A Solutions Architect is tasked with lowering costs without impacting performance and durability
Which action should be taken?

Create an Amazon EFS file system with the performance mode set to Max I/O Configure the EC2 operating system to mount the EFS file system

Create an Amazon EFS file system with the throughput mode set to Provisioned Configure the EC2 operating system to mount the EFS file system

Update the EC2 launch template to allocate a new 1-TB EBS General Purpose SSO (gp2) volume

Update the EC2 launch template to exclude the PIOPS volume Configure the application to use local instance storage

Question 12

A large company experienced a drastic increase in its monthly AWS spend. This is after Developers accidentally launched Amazon EC2 instances in unexpected regions. The company has established practices around least privileges for Developers and controls access to on-premises resources using Active Directory groups. The company now wants to control costs by restricting the level of access that Developers have to the AWS Management Console without impacting their productivity. The company would also like to allow Developers to launch Amazon EC2 in only one region, without limiting access to other services in any region.
How can this company achieve these new security requirements while minimizing the administrative burden on the Operations team?

Set up SAML-based authentication tied to an IAM role that has an AdministrativeAccess managed policy attached to i

Attach a customer managed policy that denies access to Amazon EC2 in each region except for the one required.

Create an IAM user for each Developer and add them to the developer IAM group that has the PowerUserAccess managed policy attached to i

Attach a customer managed policy that allows the Developers access to Amazon EC2 only in the required region.

Set up SAML-based authentication tied to an IAM role that has a PowerUserAccess managed policy and a customer managed policy that deny all the Developers access to any AWS services except AWS Service Catalo

Within AWS Service Catalog, create a product containing only the EC2 resources in the approved region.

Set up SAML-based authentication tied to an IAM role that has the PowerUserAccess managed policy attached to i

Attach a customer managed policy that denies access to Amazon EC2 in each region except for the one required.

Question 14

A company is migrating its on-premises build artifact server to an AWS solution. The current system consists of an Apache HTTP server that serves artifacts to clients on the local network, restricted by the perimeter firewall. The artifact consumers are largely build automation scripts that download artifacts via anonymous HTTP, which the company will be unable to modify within its migration timetable.
The company decides to move the solution to Amazon S3 static website hosting. The artifact consumers will be migrated to Amazon EC2 instances located within both public and private subnets in a virtual private cloud (VPC).
Which solution will permit the artifact consumers to download artifacts without modifying the existing automation scripts?

Create a NAT gateway within a public subnet of the VP

Add a default route pointing to the NAT gateway into the route table associated with the subnets containing consumer

Configure the bucket policy to allow the s3:ListBucket and s3:GetObject actions using the condition IpAddress and the condition key aws:SourceIp matching the elastic IP address if the NAT gateway.

Create a VPC endpoint and add it to the route table associated with subnets containing consumers.Configure the bucket policy to allow s3:ListBucket and s3:GetObject actions using the condition StringEquals and the condition key aws:sourceVpce matching the identification of the VPC endpoint.

Create an IAM role and instance profile for Amazon EC2 and attach it to the instances that consume build artifact

Configure the bucket policy to allow the s3:ListBucket and s3:GetObjects actions for theprincipal matching the IAM role created.

Create a VPC endpoint and add it to the route table associated with subnets containing consumers.Configure the bucket policy to allow s3:ListBucket and s3:GetObject actions using the condition IpAddress and the condition key aws:SourceIp matching the VPC CIDR block.

Question 15

A company is using AWS to run an internet-facing production application written in Node.js. The Development team is responsible for pushing new versions of their software directly to production. The application software is updated multiple times a day. The team needs guidance from a Solutions Architect to help them deploy the software to the production fleet quickly and with the least amount of disruption to the service.
Which option meets these requirements?

Prepackage the software into an AMI and then use Auto Scaling to deploy the production flee

For software changes, update the AMI and allow Auto Scaling to automatically push the new AMI to production.

Use AWS CodeDeploy to push the prepackaged AMI to productio

For software changes, reconfigure CodeDeploy with new AMI identification to push the new AMI to the production fleet.

Use AWS Elastic Beanstalk to host the production applicatio

For software changes, upload the new application version to Elastic Beanstalk to push this to the production fleet using a blue/green deployment method.

Deploy the base AMI through Auto Scaling and bootstrap the software using user dat

For software changes, SSH to each of the instances and replace the software with the new version.

Page: 1 / 14

Total 179 questions Full Exam Access