ExamGecko
Home Home / Amazon / SAP-C01

Amazon SAP-C01 Practice Test - Questions Answers, Page 79

Question list
Search
Search

List of questions

Search

Related questions











You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP'S connections tospecific domains from their EC2-hosted applications. You deploy a single EC2 instance running proxy software andconfigure It to accept traffic from all subnets and EC2 instances in the VPC. You configure the proxy to only pass throughtraffic to domains that you define in its whitelist configuration. You have a nightly maintenance window or 10 minutes whereall instances fetch new software updates. Each update Is about 200MB In size and there are 500 instances In the VPC thatroutinely fetch updates. After a few days you notice that some machines are failing to successfully download some, but notall of their updates within the maintenance window. The download URLs used for these updates are correctly listed in theproxy's whitelist configuration and you are able to access them manually using a web browser on the instances.

What might be happening? (Choose two.)

A.
You are running the proxy on an undersized EC2 instance type so network throughput is not sufficient for all instances to download their updates in time.
A.
You are running the proxy on an undersized EC2 instance type so network throughput is not sufficient for all instances to download their updates in time.
Answers
B.
You are running the proxy on a sufficiently-sized EC2 instance in a private subnet and its network throughput is being throttled by a NAT running on an undersized EC2 instance.
B.
You are running the proxy on a sufficiently-sized EC2 instance in a private subnet and its network throughput is being throttled by a NAT running on an undersized EC2 instance.
Answers
C.
The route table for the subnets containing the affected EC2 instances is not configured to direct network traffic for the software update locations to the proxy.
C.
The route table for the subnets containing the affected EC2 instances is not configured to direct network traffic for the software update locations to the proxy.
Answers
D.
You have not allocated enough storage to the EC2 instance running the proxy so the network buffer is filling up, causing some requests to fail.
D.
You have not allocated enough storage to the EC2 instance running the proxy so the network buffer is filling up, causing some requests to fail.
Answers
E.
You are running the proxy in a public subnet but have not allocated enough EIPs to support the needed network throughput through the Internet Gateway (IGW).
E.
You are running the proxy in a public subnet but have not allocated enough EIPs to support the needed network throughput through the Internet Gateway (IGW).
Answers
Suggested answer: A, B

A large company with hundreds of AWS accounts has a newly established centralized internal process for purchasing new or modifying existing Reserved Instances. This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement or execution. Previously, business units would directly purchase or modify Reserved Instances in their own respective AWS accounts autonomously. Which combination of steps should be taken to proactively enforce the new process in the MOST secure way possible? (Choose two.)

A.
Ensure all AWS accounts are part of an AWS Organizations structure operating in all features mode.
A.
Ensure all AWS accounts are part of an AWS Organizations structure operating in all features mode.
Answers
B.
Use AWS Config to report on the attachment of an IAM policy that denies access to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
B.
Use AWS Config to report on the attachment of an IAM policy that denies access to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
Answers
C.
In each AWS account, create an IAM policy with a DENY rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
C.
In each AWS account, create an IAM policy with a DENY rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
Answers
D.
Create an SCP that contains a deny rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions. Attach the SCP to each organizational unit (OU) of the AWS Organizations structure.
D.
Create an SCP that contains a deny rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions. Attach the SCP to each organizational unit (OU) of the AWS Organizations structure.
Answers
E.
Ensure that all AWS accounts are part of an AWS Organizations structure operating in consolidated billing features mode.
E.
Ensure that all AWS accounts are part of an AWS Organizations structure operating in consolidated billing features mode.
Answers
Suggested answer: C, E

A company wants to replace its call center system with a solution built using AWS managed services. The company call center would like the solution to receive calls, create contact flows, and scale to handle growth projections. The call center would also like the solution to use deep learning capabilities to recognize the intent of the callers and handle basic tasks, reducing the need to speak to an agent. The solution should also be able to query business applications and provide relevant information back to callers as requested. Which services should the Solutions Architect use to build this solution? (Choose three.)

A.
Amazon Rekognition to identify who is calling.
A.
Amazon Rekognition to identify who is calling.
Answers
B.
Amazon Connect to create a cloud-based contact center.
B.
Amazon Connect to create a cloud-based contact center.
Answers
C.
Amazon Alexa for Business to build conversational interfaces.
C.
Amazon Alexa for Business to build conversational interfaces.
Answers
D.
AWS Lambda to integrate with internal systems.
D.
AWS Lambda to integrate with internal systems.
Answers
E.
Amazon Lex to recognize the intent of the caller.
E.
Amazon Lex to recognize the intent of the caller.
Answers
F.
Amazon SQS to add incoming callers to a queue.
F.
Amazon SQS to add incoming callers to a queue.
Answers
Suggested answer: B, D, E

How many cg1.4xlarge on-demand instances can a user run in one region without taking any limit increase approval from AWS?

A.
20
A.
20
Answers
B.
2
B.
2
Answers
C.
5
C.
5
Answers
D.
10
D.
10
Answers
Suggested answer: B

Explanation:

Generally, AWS EC2 allows running 20 on-demand instances and 100 spot instances at a time. This limit can be increased by requesting at https://aws.amazon.com/contact-us/ec2-request. Excluding certain types of instances, the limit is lower than mentioned above. For cg1.4xlarge, the user can run only 2 on-demand instances at a time.

Reference: http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_ec2

A company plans to refactor a monolithic application into a modern application design deployed on AWS. The CI/CD pipeline needs to be upgraded to support the modern design for the application with the following requirements:

It should allow changes to be released several times every hour. It should be able to roll back the changes as quickly as possible. Which design will meet these requirements?

A.
Deploy a CI/CD pipeline that incorporates AMIs to contain the application and their configurations. Deploy the application by replacing Amazon EC2 instances.
A.
Deploy a CI/CD pipeline that incorporates AMIs to contain the application and their configurations. Deploy the application by replacing Amazon EC2 instances.
Answers
B.
Specify AWS Elastic Beanstalk to stage in a secondary environment as the deployment target for the CI/CD pipeline of the application. To deploy, swap the staging and production environment URLs.
B.
Specify AWS Elastic Beanstalk to stage in a secondary environment as the deployment target for the CI/CD pipeline of the application. To deploy, swap the staging and production environment URLs.
Answers
C.
Use AWS Systems Manager to re-provision the infrastructure for each deployment. Update the Amazon EC2 user data to pull the latest code artifact from Amazon S3 and use Amazon Route 53 weighted routing to point to the new environment.
C.
Use AWS Systems Manager to re-provision the infrastructure for each deployment. Update the Amazon EC2 user data to pull the latest code artifact from Amazon S3 and use Amazon Route 53 weighted routing to point to the new environment.
Answers
D.
Roll out the application updates as part of an Auto Scaling event using prebuilt AMIs. Use new versions of the AMIs to add instances, and phase out all instances that use the previous AMI version with the configured termination policy during a deployment event.
D.
Roll out the application updates as part of an Auto Scaling event using prebuilt AMIs. Use new versions of the AMIs to add instances, and phase out all instances that use the previous AMI version with the configured termination policy during a deployment event.
Answers
Suggested answer: A

A company is running a custom database in the AWS Cloud. The database uses Amazon EC2 for compute and uses Amazon Elastic Block Store (Amazon EBS) for storage. The database runs on the latest generation of EC2 instances and uses a General Purpose SSD (gp2) EBS volume for data.

The current data volume has the following characteristics:

The volume is 512 GB in size.

The volume never goes above 256 GB utilization.

The volume consistently uses around 1,500 IOPS.

A solutions architect needs to conduct an analysis of the current database storage layer and make a recommendation about ways to reduce cost. Which solution will provide the MOST cost savings without impacting the performance of the database?

A.
Convert the data volume to the Cloud HDD (sc1) type. Leave the volume as 512 GB. Set the volume IOPS to 1,500.
A.
Convert the data volume to the Cloud HDD (sc1) type. Leave the volume as 512 GB. Set the volume IOPS to 1,500.
Answers
B.
Convert the data volume to the Provisioned IOPS SSD (io2) type. Resize the volume to 256 GSet the volume IOPS to 1,500.
B.
Convert the data volume to the Provisioned IOPS SSD (io2) type. Resize the volume to 256 GSet the volume IOPS to 1,500.
Answers
C.
Convert the data volume to the Provisioned IOPS SSD (io2) Block Express type. Leave the volume as 512 GB. Set the volume IOPS to 1,500.
C.
Convert the data volume to the Provisioned IOPS SSD (io2) Block Express type. Leave the volume as 512 GB. Set the volume IOPS to 1,500.
Answers
D.
Convert the data volume to the General Purpose SSD (gp3) type. Resize the volume to 256 GB. Set the volume IOPS to 1,500.
D.
Convert the data volume to the General Purpose SSD (gp3) type. Resize the volume to 256 GB. Set the volume IOPS to 1,500.
Answers
Suggested answer: C

A company has a web application that uses Amazon API Gateway, AWS Lambda, and Amazon DynamoDB. A recent marketing campaign has increased demand. Monitoring software reports that many requests have significantly longer response times than before the marketing campaign.

A solutions architect enabled Amazon CloudWatch Logs for API Gateway and noticed that errors are occurring on 20% of the requests. In CloudWatch, the Lambda function Throttles metric represents 1% of the requests and the Errors metric represents 10% of the requests. Application logs indicate that, when errors occur, there is a call to DynamoDB. What change should the solutions architect make to improve the current response times as the web application becomes more popular?

A.
Increase the concurrency limit of the Lambda function
A.
Increase the concurrency limit of the Lambda function
Answers
B.
Implement DynamoDB auto scaling on the table
B.
Implement DynamoDB auto scaling on the table
Answers
C.
Increase the API Gateway throttle limit
C.
Increase the API Gateway throttle limit
Answers
D.
Re-create the DynamoDB table with a better-partitioned primary index
D.
Re-create the DynamoDB table with a better-partitioned primary index
Answers
Suggested answer: B

You have a website which requires international presence and consequently you have set it up as follows. It is hosted on 30 EC2 instances.

It is on in 15 regions around the globe. Each region has 2 instances. All the instances are a public hosted zone. Which of the following is the best way to configure your site to maintain availability with minimum downtime if one of the 15 regions was to lose network connectivity for an extended period? (Choose two.)

A.
Create a Route 53 Latency Based Routing Record set that resolves to an Elastic Load Balancer in each region and has the Evaluate Target Health flag set to true.
A.
Create a Route 53 Latency Based Routing Record set that resolves to an Elastic Load Balancer in each region and has the Evaluate Target Health flag set to true.
Answers
B.
Create a Route 53 failover routing policy and configure an active-passive failover.
B.
Create a Route 53 failover routing policy and configure an active-passive failover.
Answers
C.
Create a Route 53 Failover Routing Policy and assign each resource record set a unique identifier and a relative weight.
C.
Create a Route 53 Failover Routing Policy and assign each resource record set a unique identifier and a relative weight.
Answers
D.
Create a Route 53 Geolocation Routing Policy that resolves to an Elastic Load Balancer in each region and has the Evaluate Target Health flag set to false.
D.
Create a Route 53 Geolocation Routing Policy that resolves to an Elastic Load Balancer in each region and has the Evaluate Target Health flag set to false.
Answers
Suggested answer: A, B

Explanation:

It is best to use the latency routing policy when you have resources in multiple Amazon EC2 data centers that perform the same function and you want Amazon Route 53 to respond to DNS queries with the resources that provide the best latency.

You could also use the failover routing policy (for public hosted zones only) when you want to configure an active-passive failover, in which one resource takes all traffic when it's available and the other resource takes all traffic when the first resource isn't available.

Reference: http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-latency

A company that is new to AWS reports it has exhausted its service limits across several accounts that are on the Basic Support plan. The company would like to prevent this from happening in the future. What is the MOST efficient way of monitoring and managing all service limits in the company’s accounts?

A.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, provide notifications using Amazon SNS if the limits are close to exceeding the threshold.
A.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, provide notifications using Amazon SNS if the limits are close to exceeding the threshold.
Answers
B.
Reach out to AWS Support to proactively increase the limits across all accounts. That way, the customer avoids creating and managing infrastructure just to raise the service limits.
B.
Reach out to AWS Support to proactively increase the limits across all accounts. That way, the customer avoids creating and managing infrastructure just to raise the service limits.
Answers
C.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, programmatically increase the limits that are close to exceeding the threshold.
C.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, programmatically increase the limits that are close to exceeding the threshold.
Answers
D.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, and use Amazon SNS for notifications if a limit is close to exceeding the threshold. Ensure that the accounts are using the AWS Business Support plan at a minimum.
D.
Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, and use Amazon SNS for notifications if a limit is close to exceeding the threshold. Ensure that the accounts are using the AWS Business Support plan at a minimum.
Answers
Suggested answer: A

A company is building a software-as-a-service (SaaS) solution on AWS. The company has deployed an Amazon API Gateway REST API with AWS Lambda integration in multiple AWS Regions and in the same production account. The company offers tiered pricing that gives customers the ability to pay for the capacity to make a certain number of API calls per second. The premium tier offers up to 3,000 calls per second, and customers are identified by a unique API key.

Several premium tier customers in various Regions report that they receive error responses of 429 Too Many Requests from multiple API methods during peak usage hours. Logs indicate that the Lambda function is never invoked. What could be the cause of the error messages for these customers?

A.
The Lambda function reached its concurrency limit.
A.
The Lambda function reached its concurrency limit.
Answers
B.
The Lambda function its Region limit for concurrency.
B.
The Lambda function its Region limit for concurrency.
Answers
C.
The company reached its API Gateway account limit for calls per second.
C.
The company reached its API Gateway account limit for calls per second.
Answers
D.
The company reached its API Gateway default per-method limit for calls per second.
D.
The company reached its API Gateway default per-method limit for calls per second.
Answers
Suggested answer: C
Total 906 questions
Go to page: of 91