Question 1

A company has an application that runs on Amazon EC2 instances in an Amazon EC2 Auto Scaling group.

The company uses AWS CodePipeline to deploy the application. The instances that run in the Auto Scaling

group are constantly changing because of scaling events

When the company deploys new application code versions the company Installs the AWS CodeDeploy agent

on any new target EC2 instances and associates the instances with the CodeDeploy deployment group The

application is set to go live within the next 24 hours

What should a solutions architect recommend to automate the application deployment process with the

LEAST amount of operational overhead?

Options :

A :

Configure Amazon EventBridge (Amazon CloudWatch Events) to invoke an AWS Lambda function

when a new EC2 instance is launched into the Auto Scaling group. Code the Lambda function to

associate the EC2 instances with the CodeDeploy deployment group.

B :

Write a script to suspend Amazon EC2 Auto Scaling operations before the deployment of new code.

When the deployment is complete, create a new AMI and configure the Auto Scaling group-s launch

template to use the new AMI for new launches. Resume Amazon EC2 Auto Scaling operations

C :

Create a new AWS CodeBuild project that creates a new AMI that contains the new code Configure

CodeBuild to update the Auto Scaling group-s launch template to the new AMI Run an Amazon EC2

Auto Scaling instance refresh operation.

D :

Create a new AMI that has the CodeDeploy agent installed Configure the Auto Scaling group-s launch

template to use the new AMI Associate the CodeDeploy deployment group with the Auto Scaling group

instead of the EC2 instances.

Answer: D

Question 2

A solutions architect must provide a secure way for a team of cloud engineers to use the AWS CLI to upload objects into an Amazon S3 bucket Each cloud engineer has an IAM user. IAM access keys and a virtual multi-factor authentication (MFA) device The IAM users for the cloud engineers are in a group that is named S3-access The cloud engineers must use MFA to perform any actions in Amazon S3

Which solution will meet these requirements?

Options :

A : Attach a policy to the S3 bucket to prompt the 1AM user for an MFA code when the 1AM user performs actions on the S3 bucket Use 1AM access keys with the AWS CLI to call Amazon S3

B : Update the trust policy for the S3-access group to require principals to use MFA when principals assume the group Use 1AM access keys with the AWS CLI to call Amazon S3

C : Attach a policy to the S3-access group to deny all S3 actions unless MFA is present Use 1AM access keys with the AWS CLI to call Amazon S3

D : Attach a policy to the S3-access group to deny all S3 actions unless MFA is present Request temporary credentials from AWS Security Token Service (AWS STS) Attach the temporary credentials in a profile that Amazon S3 will reference when the user performs actions in Amazon S3

Answer: D

Question 3

A company runs an application in a fleet of Amazon EC2 instances in the us-east-2 region. A database server is hosted on the on-premises data center which complies with the BASE (Basically Available, Soft state, Eventual consistency) model rather than the ACID (Atomicity, Consistency, Isolation, Durability) consistency model. The on-premises network has a 10 GB AWS Direct Connect connection to the Amazon VPC in us-east-2. The application relies on this database for normal operations. Whenever there are lots of database write requests, the application behavior becomes erratic.

Which of the following options should the solutions architect implement to improve the performance of the application in a cost-effective way?

Options :

A : Create an Amazon SQS queue and develop a consumer process to flush the queue to the on-premises database server. Update the application to enable writing to the SQS queue.

B : Update the application to write to an Amazon DynamoDB table. Feed the table to an Amazon EMR cluster and create a map function that will update the on-premises database for every table update.

C : Create a Hadoop cluster using Amazon Elastic Map Reduce (EMR) and use the S3DistCp tool to synchronize data between the on-premises database and the Hadoop cluster.

D : Create an Amazon RDS multi-AZ instance that will synchronize with the on-premises database server using Amazon EventBridge. Redirect the write operations of the application to the Amazon RDS endpoint via the Amazon Elastic Transcoder service.

Answer: A

Question 4

A solutions architect is working with a company that is extremely sensitive to its IT costs and wishes to

implement controls that will result in a predictable AWS spend each month Which combination ot steps can

help the company control and monitor its monthly AWS usage to achieve a cost that is as close as possible to

the target amount? (Select THREE.)

Options :

A :

Implement an IAM policy that requires users to specify a 'workload'

tag for cost allocation when launching Amazon EC2 instances

B :

Contact AWS Support and ask that they apply limits to the account so that users are not able to launch more

than a certain number of instance types

C : Purchase all upfront Reserved Instances that cover 100% of the account-s expected Amazon EC2 usage

D : Place conditions in the users' IAM policies that limit the number of instances they are able to launch

E : Define 'workload' as a cost allocation tag in the AWS Billing and Cost Management console

F : Set up AWS Budgets to alert and notify when a given workload is expected to exceed a defined cost

Answer: A

Question 5

A company has several AWS accounts. A development team is building an automation framework for cloud

governance and remediation processes. The automation framework uses AWS Lambda functions in a

centralized account. A solutions architect must implement a least privilege permissions policy that allows the

Lambda functions to run in each of the company's AWS accounts.

Which combination of steps will meet these requirements? (Choose two.)

Options :

A :

In the centralized account, create an IAM role that has the Lambda service as a trusted entity. Add an

inline policy to assume the roles of the other AWS accounts.

B :

In the other AWS accounts, create an IAM role that has minimal permissions. Add the centralized

account-s Lambda IAM role as a trusted entity.

C :

In the centralized account, create an IAM role that has roles of the other accounts as trusted entities.

Provide minimal permissions.

D :

In the other AWS accounts, create an IAM role that has permissions to assume the role of the centralized

account. Add the Lambda service as a trusted entity.

E :

In the other AWS accounts, create an IAM role that has minimal permissions. Add the Lambda service

as a trusted entity.

Answer: A,B

Free SAP-C02 Mock Exam – Practice Online Confidently

Buying Options: