Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 Practice Test Question - Page 13

Question 37 (Topic 1)

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The company’s CIO has asked a solutions architect to design a simple, highly available, and loosely coupled order processing application. The application is responsible for receiving and processing orders before storing them in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale during marketing campaigns to process the orders with minimal delays. Which of the following is the MOST reliable approach to meet the requirements?

Select an option, then click Submit answer.

○ Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them.
○ Receive the orders in an Amazon SQS queue and invoke an AWS Lambda function to process them.
○ Receive the orders using the AWS Step Functions program and launch an Amazon ECS container to process them.
○ Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them.

Reference / correct answer:

Receive the orders in an Amazon SQS queue and invoke an AWS Lambda function to process them.

Most accepted answer: B. Receive the orders in an Amazon SQS queue and invoke an AWS Lambda function to process them.

Community votes: B=9, C=3

Selected Answer: B Loosely coupled = SQS - Lambda is also the simplest to use upvoted 7 times AWSum1 1 year, 9 months ago Yip that key words "loosely coupled" has been repeated several times during the trainings upvoted 1 times ...

Yip that key words "loosely coupled" has been repeated several times during the trainings upvoted 1 times

Selected Answer: B option B upvoted 5 times

Using an Amazon SQS queue (option B) and an AWS Lambda function is the most reliable approach for several reasons: Scalability: AWS Lambda can automatically scale based on incoming requests, ensuring that orders are processed quickly even during peak traffic. High availability: By using a message queue like SQS, orders are stored temporarily until they can be processed, ensuring that no orders are lost due to system failures. Loosely coupled architecture: The use of an SQS queue and Lambda function decouples the order processing from the storage (Amazon DynamoDB) in a separate logical layer, making it easier to scale and maintain individual components independently. Handling sporadic traffic patterns: AWS Lambda provides a serverless computing experience that automatically scales based on demand, making it well-suited for handling variable workload spikes. upvoted 2 times

Selected Answer: B Option B upvoted 3 times

Question 38 (Topic 1)

A company is using AWS Control Tower to manage AWS accounts in an organization in AWS Organizations. The company has an OU that contains accounts. The company must prevent any new or existing Amazon EC2 instances in the OU's accounts from gaining a public IP address. Which solution will meet these requirements?

Select an option, then click Submit answer.

○ Configure all instances in each account in the OU to use AWS Systems Manager. Use a Systems Manager Automation runbook to prevent public IP addresses from being attached to the instances.
○ Implement the AWS Control Tower proactive control to check whether instances in the OU's accounts have a public IP address. Set the AssociatePublicIpAddress property to False. Attach the proactive control to the OU.
○ Create an SCP that prevents the launch of instances that have a public IP address. Additionally, configure the SCP to prevent the attachment of a public IP address to existing instances. Attach the SCP to the OU.
○ Create an AWS Config custom rule that detects instances that have a public IP address. Configure a remediation action that uses an AWS Lambda function to detach the public IP addresses from the instances.

Reference / correct answer:

Create an SCP that prevents the launch of instances that have a public IP address. Additionally, configure the SCP to prevent the attachment of a public IP address to existing instances. Attach the SCP to the OU.

Most accepted answer: C. Create an SCP that prevents the launch of instances that have a public IP address. Additionally, configure the SCP to prevent the attachment of a public IP address to existing instances. Attach the SCP to the OU.

Community votes: B=5, C=11

Selected Answer: C Option C - From AWS doc page "Don't use AWS Organizations to update service control policies (SCPs) attached to an OU that is registered with AWS Control Tower. Doing so could result in the controls entering an unknown state, which will require you to repair your landing zone or re-register your OU in AWS Control Tower. Instead, you can create new SCPs and attach those to the OUs rather than editing the SCPs that AWS Control Tower has created." https://docs.aws.amazon.com/controltower/latest/userguide/orgs-guidance.html upvoted 12 times

Selected Answer: B Voting for B: SCP will cause a state drift, since company already use Control Tower upvoted 6 times 8693a49 2 years ago Adding a new SCP will not cause drift. Modifying an existing SCP that was created by CT would, which is not the case here. upvoted 3 times ...

Adding a new SCP will not cause drift. Modifying an existing SCP that was created by CT would, which is not the case here. upvoted 3 times

Selected Answer: B Why Option B Is the Best Fit Proactive controls in AWS Control Tower use CloudFormation hooks to validate resource configurations before deployment. By setting the AssociatePublicIpAddress property to False, you ensure that: - New EC2 instances cannot be launched with public IPs. - The control is enforced across all accounts in the OU, maintaining centralized governance. - Deployment fails if the configuration violates the control, preventing misconfigurations before they occur. This approach is preventive and scalable, aligning perfectly with the requirement to block public IPs for both new and existing EC2 instances. upvoted 1 times

Selected Answer: C "Behavior of proactive controls Proactive controls check resources whenever those resources are created or updated by means of AWS CloudFormation stack operations. Specifically, these proactive controls are implemented as preCreate and preUpdate hook handlers. As a consequence, these controls may not affect requests that are made directly to services through the AWS console, through AWS APIs, or through other means such as AWS SDKs, or other Infrastructure-as-Code (IaC) tools. For more information about when preCreate and preUpdate hooks operate, see AWS CloudFormation hooks." upvoted 1 times

Question 39 (Topic 1)

A company is planning to migrate an application from on premises to the AWS Cloud. The company will begin the migration by moving the application’s underlying data storage to AWS. The application data is stored on a shared file system on premises, and the application servers connect to the shared file system through SMB. A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage. Until the application is fully migrated and code is rewritten to use native Amazon S3 APIs, the application must continue to have access to the data through SMB. The solutions architect must migrate the application data to AWS to its new location while still allowing the on-premises application to access the data. Which solution will meet these requirements?

Select an option, then click Submit answer.

○ Create a new Amazon FSx for Windows File Server file system. Configure AWS DataSync with one location for the on-premises file share and one location for the new Amazon FSx file system. Create a new DataSync task to copy the data from the on-premises file share location to the Amazon FSx file system.
○ Create an S3 bucket for the application. Copy the data from the on-premises storage to the S3 bucket.
○ Deploy an AWS Server Migration Service (AWS SMS) VM to the on-premises environment. Use AWS SMS to migrate the file storage server from on premises to an Amazon EC2 instance.
○ Create an S3 bucket for the application. Deploy a new AWS Storage Gateway file gateway on an on-premises VM. Create a new file share that stores data in the S3 bucket and is associated with the file gateway. Copy the data from the on-premises storage to the new file gateway endpoint.

Reference / correct answer:

Create an S3 bucket for the application. Deploy a new AWS Storage Gateway file gateway on an on-premises VM. Create a new file share that stores data in the S3 bucket and is associated with the file gateway. Copy the data from the on-premises storage to the new file gateway endpoint.

Most accepted answer: D. Create an S3 bucket for the application. Deploy a new AWS Storage Gateway file gateway on an on-premises VM. Create a new file share that stores data in the S3 bucket and is associated with the file gateway. Copy the data from the on-premises storage to the new file gateway endpoint.

Community votes: B=1, D=6

Option D meets all the requirements: • Create an S3 bucket for the application: This provides a shared storage location for the application's data. • Deploy a new AWS Storage Gateway file gateway on an on-premises VM: The file gateway is used to enable SMB access to the S3 bucket, allowing the on-premises application to continue accessing the data through SMB. • Create a new file share that stores data in the S3 bucket and is associated with the file gateway: This creates a bridge between the on-premises file system and the S3 bucket, allowing data to be copied from one location to another. • Copy the data from the on-premises storage to the new file gateway endpoint: This ensures that all application data is migrated to the new shared storage location. upvoted 3 times juanife 1 year, 5 months ago this is a very completed and comprenhensive answer. Thanks AzureDP900 for making our lives easier while trying to understand AWS' questions upvoted 2 times ...

this is a very completed and comprenhensive answer. Thanks AzureDP900 for making our lives easier while trying to understand AWS' questions upvoted 2 times

Option A For me it's quite clear: "The solutions architect must migrate the application data to AWS to its new location WHILE STILL ALLOWING the on-premises application to access the data." upvoted 3 times wbedair 2 years, 1 month ago Not right. As per question requirements "A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage" upvoted 4 times ...

Not right. As per question requirements "A solutions architect must implement a solution that uses an Amazon S3 bucket for shared storage" upvoted 4 times

Selected Answer: D Option D : AWS Architecture Blog https://aws.amazon.com/blogs/architecture/connect-amazon-s3-file-gateway-using-aws-privatelink-for-amazon-s3/ upvoted 3 times

Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 – Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 Practice Test Question