Question 1

A company is configuring connectivity to a multi-account AWS environment to support application workloads

fiat serve users in a single geographic region. The workloads depend on a highly available, on-premises legacy

system deployed across two locations It is critical for the AWS workloads to manias connectivity to the legacy

system, and a minimum of 5 Gbps of bandwidth is required All application workloads within AWS must have

connectivity with one another.

Which solution will meet these requirements?

Options :

A :

Configure multiple AWS Direct Connect (OX) 10 Gbps dedicated connections from a DX partner for

each on-premises location Create private virtual interfaces on each connection for each AWS account

VPC Associate me private virtual interface with a virtual private gateway attached to each VPC

B :

Configure multiple AWS Direct Connect (DX) 10 Gbps dedicated connections from two DX partners

for each on-premises location Create and attach a virtual private gateway for each AWS account VPC.

Create a DX gateway m a central network account and associate it with the virtual private gateways

Create a public virtual interface on each DX connection and associate the interface with me DX

gateway.

C :

Configure multiple AWS Direct Connect (DX) 10 Gbps dedicated connections from two DX partners

for each on-premises location Create a transit gateway and a DX gateway in a central network account.

Create a transit virtual interface for each DX interlace and associate them with the DX gateway. Create a

gateway association between the DX gateway and the transit gateway

D :

Configure multiple AWS Direct Connect (DX) 10 Gbps dedicated connections from a DX partner for

each on-premises location Create and attach a virtual private gateway for each AWS account VPC.

Create a transit gateway in a central network account and associate It with the virtual private gateways

Create a transit virtual interface on each DX connection and attach the interface to the transit gateway.

Answer: B

Question 2

A company has a web application that allows users to upload short videos. The videos are stored on Amazon

EBS volumes and analyzed by custom recognition software for categorization.

The website contains stat c content that has variable traffic with peaks in certain months. The architecture

consists of Amazon EC2 instances running in an Auto Scaling group for the web application and EC2

instances running in an Auto Scaling group to process an Amazon SQS queue The company wants to

re-architect the application to reduce operational overhead using AWS managed services where possible and

remove dependencies on third-party software.

Which solution meets these requirements?

Options :

A :

Use Amazon ECS containers for the web application and Spot Instances for the Auto Scaling group that

processes the SQS queue. Replace the custom software with Amazon Recognition to categorize the

videos.

B :

Store the uploaded videos n Amazon EFS and mount the file system to the EC2 instances for Te web

application. Process the SOS queue with an AWS Lambda function that calls the Amazon Rekognition

API to categorize the videos.

C :

Host the web application in Amazon S3. Store the uploaded videos in Amazon S3. Use S3 event

notifications to publish events to the SQS queue Process the SQS queue with an AWS Lambda function

that calls the Amazon Rekognition API to categorize the videos.

D :

Use AWS Elastic Beanstalk to launch EC2 instances in an Auto Scaling group for the web application

and launch a worker environment to process the SQS queue Replace the custom software with Amazon

Rekognition to categorize the videos.

Answer: C

Question 3

A company's solution architect is designing a diasaster recovery (DR) solution for an application that runs on

AWS. The application uses PostgreSQL 11.7 as its database. The company has an PRO of 30 seconds. The

solutions architect must design a DR solution with the primary database in the us-east-1 Region and the

database in the us-west-2 Region.

What should the solution architect do to meet these requirements with minimum application change?

Options :

A :

Migrate the database to Amazon RDS for PostgreSQL in us-east-1. Set up a read replica up a read

replica in us-west-2. Set the managed PRO for the RDS database to 30 seconds.

B :

Migrate the database to Amazon for PostgreSQL in us-east-1. Set up a standby replica in an Availability

Zone in us-west-2, Set the managed PRO for the RDS database to 30 seconds.

C :

Migrate the database to an Amazon Aurora PostgreSQL global database with the primary Region as

us-east-1 and the secondary Region as us-west-2. Set the managed PRO for the Aurora database to 30

seconds.

D :

Migrate the database to Amazon DynamoDB in us-east-1. Set up global tables with replica tables that

are created in us-west-2.

Answer: A

Question 4

A team collects and routes behavioral data for an entire company The company runs a Multi-AZ VPC

environment with public subnets, private subnets, and in internet gateway Each public subnet also contains a

NAT gateway Most of the company's applications read from and write to Amazon Kinesis Data Streams. Most

of the workloads am in private subnets.

A solutions architect must review the infrastructure The solutions architect needs to reduce costs and maintain

the function of the applications The solutions architect uses Cost Explorer and notices that the cost in the

EC2-Other category is consistently high A further review shows that NatGateway-Bytes charges are increasing

the cost in the EC2-Other category.

What should the solutions architect do to meet these requirements?

Options :

A : Enable VPC Flow Logs. Use Amazon Athena to analyze the logs for traffic that can be removed. Ensure that security groups are Mocking traffic that is responsible for high costs.

B : Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that applications have the correct IAM permissions to use the interface VPC endpoint.

C : Enable VPC Flow Logs and Amazon Detective Review Detective findings for traffic that is not related to Kinesis Data Streams Configure security groups to block that traffic

D : Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that the VPC endpoint policy allows traffic from the applications.

Answer: D

Question 5

A company has loT sensors that monitor traffic patterns throughout a large city. The company wants to read

and collect data from the sensors and perform aggregations on the data.

A solutions architect designs a solution in which the loT devices are streaming to Amazon Kinesis Data

Streams. Several applications are reading from the stream. However, several consumers are experiencing

throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.

Which actions should the solutions architect take to resolve this issue? (Select THREE.)

Options :

A : Reshard the stream to increase the number of shards in the stream.

B : Use the Kinesis Producer Library (KPL). Adjust the polling frequency.

C : Use consumers with the enhanced fan-out feature.

D : Reshard the stream to reduce the number of shards in the stream.

E : Use an error retry and exponential backoff mechanism in the consumer logic.

F : Configure the stream to use dynamic partitioning.

Answer: A,C,D

Free SAP-C02 Mock Exam – Practice Online Confidently

Buying Options: