A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region. The company’s on-premises network uses the connection to communicate with the company’s resources in the AWS Cloud. The connection has a single private virtual interface that connects to a single VPC.A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region. The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.Which solution meets these requirements?
Answer(s): A
A. Provision a Direct Connect gateway. Delete the existing private virtual interface from the existing connection. Create the second Direct Connect connection. Create a new private virtual interface on each connection, and connect both private virtual interfaces to the Direct Connect gateway. Connect the Direct Connect gateway to the single VPC is the correct solution because it provides redundancy and future-proofing for connectivity to other AWS Regions.Using a Direct Connect gateway enables access to multiple VPCs across different AWS Regions using the same Direct Connect connections. Deleting the existing private virtual interface and creating new private virtual interfaces on both connections ensures that the setup is aligned with the Direct Connect gateway, providing resilience and scalability as the company expands into other Regions.
A company has a web application that allows users to upload short videos. The videos are stored on Amazon EBS volumes and analyzed by custom recognition software for categorization.The website contains static content that has variable traffic with peaks in certain months. The architecture consists of Amazon EC2 instances running in an Auto Scaling group for the web application and EC2 instances running in an Auto Scaling group to process an Amazon SQS queue. The company wants to re-architect the application to reduce operational overhead using AWS managed services where possible and remove dependencies on third-party software.Which solution meets these requirements?
Answer(s): C
C. Host the web application in Amazon S3. Store the uploaded videos in Amazon S3. Use S3 event notification to publish events to the SQS queue. Process the SQS queue with an AWS Lambda function that calls the Amazon Rekognition API to categorize the videos is the correct solution because it reduces operational overhead by leveraging AWS managed services. Hosting the static web content in Amazon S3 removes the need for EC2 instances for the web app, and storing uploaded videos in S3 simplifies the storage solution. Using S3 event notifications to trigger an SQS queue ensures the videos are processed efficiently, and AWS Lambda coupled with Amazon Rekognition provides a scalable, managed solution for video analysis, replacing the custom recognition software.
A company has a serverless application comprised of Amazon CloudFront, Amazon API Gateway, and AWS Lambda functions. The current deployment process of the application code is to create a new version number of the Lambda function and run an AWS CLI script to update. If the new function version has errors, another CLI script reverts by deploying the previous working version of the function. The company would like to decrease the time to deploy new versions of the application logic provided by the Lambda functions, and also reduce the time to detect and revert when errors are identified.How can this be accomplished?
Answer(s): B
B) Use AWS SAM and built-in AWS CodeDeploy to deploy the new Lambda version, gradually shift traffic to the new version, and use pre-traffic and post-traffic test functions to verify code. Rollback if Amazon CloudWatch alarms are triggered is the correct solution because AWS SAM (Serverless Application Model) integrates seamlessly with AWS CodeDeploy to allow safe, automated deployments of Lambda functions. The gradual traffic shifting feature minimizes the risk of deployment failures by slowly routing traffic to the new version while monitoring for errors. If an issue arises, automatic rollback can occur based on CloudWatch alarms, reducing deployment time and ensuring minimal disruption. This approach also provides better control over traffic and error detection.
A company is planning to store a large number of archived documents and make the documents available to employees through the corporate intranet. Employees will access the system by connecting through a client VPN service that is attached to a VPC. The data must not be accessible to the public.The documents that the company is storing are copies of data that is held on physical media elsewhere. The number of requests will be low. Availability and speed of retrieval are not concerns of the company.Which solution will meet these requirements at the LOWEST cost?
A) Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint is the correct answer because it offers the lowest cost option for infrequently accessed data while ensuring security and accessibility within the corporate network.Using S3 One Zone-IA significantly reduces the cost by storing data in a single Availability Zone, which is ideal since availability and redundancy are not a concern. An S3 interface endpoint allows access to the data securely without exposing it to the public internet, adhering to the security requirement. Website hosting on S3 is not strictly necessary for this use case but could provide a simple interface for document access, adding convenience for employees.This approach balances cost-efficiency with security, making it the best choice given the company's requirements.
A company is using an on-premises Active Directory service for user authentication. The company wants to use the same authentication service to sign in to the company’s AWS accounts, which are using AWS Organizations. AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company’s AWS accounts.The company’s security policy requires conditional access to the accounts based on user groups and roles. User identities must be managed in a single location.Which solution will meet these requirements?
A) Configure AWS IAM Identity Center (AWS Single Sign-On) to connect to Active Directory by using SAML 2.0. Enable automatic provisioning by using the System for Cross-domain Identity Management (SCIM) v2.0 protocol. Grant access to the AWS accounts by using attribute-based access controls (ABACs) is the correct solution because it allows seamless integration with the on-premises Active Directory for user authentication. AWS IAM Identity Center (AWS SSO) can connect with the Active Directory through SAML 2.0, which supports the single sign-on functionality. SCIM 2.0 ensures automatic provisioning of users and groups, and ABAC allows for conditional access based on user attributes, aligning with the company’s security policy requirements.
Post your Comments and Discuss Amazon SAP-C02 exam dumps with other Community members:
AWS Learner Commented on April 11, 2025 This sample questions for SAP-C02 exam really helped me pass the exam from the first try. Anonymous
Mini monk Commented on March 09, 2025 Didn't test yet Anonymous
ry Commented on February 12, 2025 very helpful Anonymous
Vlad Commented on February 06, 2024 This is my 2nd time getting a test from you for AWS and first one worked out well lets hope this one does too UNITED STATES
Darnell Morris Commented on February 05, 2024 I'm looking forward to passing the AWS Solutions Architect Professional exam. My system crashed with my previous purchase and my subscription expired therefore I need to renew. UNITED STATES
Roberts Commented on October 24, 2023 I gave the AWS SAP-C02 test and studied through as it has latest mock tests available which helped me evaluate my performance and got me 906/1000. Anonymous
Andrew Commented on August 23, 2023 very helpful Anonymous
Mukesh Commented on July 10, 2023 Good questions UNITED KINGDOM
Mukesh Commented on July 10, 2023 good questions UNITED KINGDOM
Willard Commented on March 18, 2023 This guide is a one-way ticket to Successville - Passed my exam and now I am the mayor! AUSTRALIA
Mora Commented on February 09, 2023 Free-Braindumps.com helped me ace my exam. The practice practice questions were spot on and the explanations were helpful. UNITED STATES