QUESTION: 257

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are part of an Auto Scaling group. The application has unpredictable workloads and frequently scales out and in. The company’s development team wants to analyze application logs to find ways to improve the application's performance. However, the logs are no longer available after instances scale in.

Which solution will give the development team the ability to view the application logs after a scale-in event?

Enable access logs for the ALB. Store the logs in an Amazon S3 bucket.
Configure the EC2 instances to publish logs to Amazon CloudWatch Logs by using the unified CloudWatch agent.
Modify the Auto Scaling group to use a step scaling policy.
Instrument the application with AWS X-Ray tracing.

Answer(s): B

Explanation:

B) Configuring the EC2 instances to publish logs to Amazon CloudWatch Logs using the unified CloudWatch agent ensures that application logs are available even after instances are terminated due to scaling events. This solution allows the development team to view and analyze logs regardless of the lifecycle of the EC2 instances, providing persistent log storage and easy access to historical logs for performance analysis.

Reveal Solution Next Question

QUESTION: 258

A company runs an unauthenticated static website (www.example.com) that includes a registration form for users. The website uses Amazon S3 for hosting and uses Amazon CloudFront as the content delivery network with AWS WAF configured. When the registration form is submitted, the website calls an Amazon API Gateway API endpoint that invokes an AWS Lambda function to process the payload and forward the payload to an external API call.

During testing, a solutions architect encounters a cross-origin resource sharing (CORS) error. The solutions architect confirms that the CloudFront distribution origin has the Access-Control-Allow-Origin header set to www.example.com.

What should the solutions architect do to resolve the error?

Change the CORS configuration on the S3 bucket. Add rules for CORS to the AllowedOrigin element for www.example.com.
Enable the CORS setting in AWS WAF. Create a web ACL rule in which the Access-Control-Allow-Origin header is set to www.example.com.
Enable the CORS setting on the API Gateway API endpoint. Ensure that the API endpoint is configured to return all responses that have the Access-Control-Allow-Origin header set to www.example.com.
Enable the CORS setting on the Lambda function. Ensure that the return code of the function has the Access-Control-Allow-Origin header set to www.example.com.

Answer(s): C

Explanation:

C) The CORS (Cross-Origin Resource Sharing) error occurs when the API Gateway endpoint does not include the appropriate Access-Control-Allow-Origin header in its response. To resolve the error, the solutions architect should enable CORS on the API Gateway API endpoint and configure the endpoint to return responses with the Access-Control-Allow-Origin header set to www.example.com. This will allow the website hosted on S3 to make requests to the API without running into CORS issues.

Reveal Solution Next Question

QUESTION: 259

A company has many separate AWS accounts and uses no central billing or management. Each AWS account hosts services for different departments in the company. The company has a Microsoft Azure Active Directory that is deployed.

A solutions architect needs to centralize billing and management of the company’s AWS accounts. The company wants to start using identity federation instead of manual user management. The company also wants to use temporary credentials instead of long-lived access keys.

Which combination of steps will meet these requirements? (Choose three.)

Create a new AWS account to serve as a management account. Deploy an organization in AWS Organizations. Invite each existing AWS account to join the organization. Ensure that each account accepts the invitation.
Configure each AWS account's email address to be aws+@example.com so that account management email messages and invoices are sent to the same place.
Deploy AWS IAM Identity Center (AWS Single Sign-On) in the management account. Connect IAM Identity Center to the Azure Active Directory. Configure IAM Identity Center for automatic synchronization of users and groups.
Deploy an AWS Managed Microsoft AD directory in the management account. Share the directory with all other accounts in the organization by using AWS Resource Access Manager (AWS RAM).
Create AWS IAM Identity Center (AWS Single Sign-On) permission sets. Attach the permission sets to the appropriate IAM Identity Center groups and AWS accounts.
Configure AWS Identity and Access Management (IAM) in each AWS account to use AWS Managed Microsoft AD for authentication and authorization.

Answer(s): A,C,E

Explanation:

A) Creating a new AWS account to serve as a management account and deploying an organization in AWS Organizations allows for centralized billing and management. Inviting each existing AWS account to join the organization ensures that all accounts are managed from a central point.
C) Deploying AWS IAM Identity Center (AWS Single Sign-On) in the management account and connecting it to Azure Active Directory allows the company to use identity federation, which eliminates the need for manual user management. Automatic synchronization of users and groups further simplifies management.
E) Creating IAM Identity Center permission sets and attaching them to the appropriate groups and AWS accounts provides role-based access control, ensuring that temporary credentials are used instead of long-lived access keys, meeting the security requirement.
This combination ensures centralized billing, identity federation, and temporary credentials across all AWS accounts.

Reveal Solution Next Question

QUESTION: 260

A company wants to manage the costs associated with a group of 20 applications that are infrequently used, but are still business-critical, by migrating to AWS. The applications are a mix of Java and Node.js spread across different instance clusters. The company wants to minimize costs while standardizing by using a single deployment methodology.

Most of the applications are part of month-end processing routines with a small number of concurrent users, but they are occasionally run at other times. Average application memory consumption is less than 1 GB. though some applications use as much as 2.5 GB of memory during peak processing. The most important application in the group is a billing report written in Java that accesses multiple data sources and often runs for several hours.

Which is the MOST cost-effective solution?

Deploy a separate AWS Lambda function for each application. Use AWS CloudTrail logs and Amazon CloudWatch alarms to verify completion of critical jobs.
Deploy Amazon ECS containers on Amazon EC2 with Auto Scaling configured for memory utilization of 75%. Deploy an ECS task for each application being migrated with ECS task scaling. Monitor services and hosts by using Amazon CloudWatch.
Deploy AWS Elastic Beanstalk for each application with Auto Scaling to ensure that all requests have sufficient resources. Monitor each AWS Elastic Beanstalk deployment by using CloudWatch alarms.
Deploy a new Amazon EC2 instance cluster that co-hosts all applications by using EC2 Auto Scaling and Application Load Balancers. Scale cluster size based on a custom metric set on instance memory utilization. Purchase 3-year Reserved Instance reservations equal to the GroupMaxSize parameter of the Auto Scaling group.

Answer(s): B

Explanation:

B) Deploying Amazon ECS containers on EC2 with Auto Scaling configured for memory utilization ensures cost-effective resource allocation by scaling based on actual demand. Each application can run as an individual ECS task, allowing efficient management of resources based on the varying memory consumption requirements. This approach provides a standardized deployment methodology for Java and Node.js applications while minimizing costs. CloudWatch can monitor services and memory utilization to ensure that resources are appropriately scaled, meeting the business-critical nature of the applications.

Reveal Solution Next Question

Free SAP-C01 Exam Braindumps (page: 65)

QUESTION: 257

Explanation:

QUESTION: 258

Explanation:

QUESTION: 259

Explanation:

QUESTION: 260

Explanation: