Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 – Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-PROFESSIONAL-SAP-C02 Practice Test Question

Loading demo links...

Showing 7–9 of 53 questions

Question 7 (Topic 1)

A company runs a Java application that has complex dependencies on VMs that are in the company's data center. The application is stable. but the company wants to modernize the technology stack. The company wants to migrate the application to AWS and minimize the administrative overhead to maintain the servers. Which solution will meet these requirements with the LEAST code changes?

Select an option, then click Submit answer.

○ Migrate the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate by using AWS App2Container. Store container images in Amazon Elastic Container Registry (Amazon ECR). Grant the ECS task execution role permission 10 access the ECR image repository. Configure Amazon ECS to use an Application Load Balancer (ALB). Use the ALB to interact with the application.
○ Migrate the application code to a container that runs in AWS Lambda. Build an Amazon API Gateway REST API with Lambda integration. Use API Gateway to interact with the application.
○ Migrate the application to Amazon Elastic Kubernetes Service (Amazon EKS) on EKS managed node groups by using AWS App2Container. Store container images in Amazon Elastic Container Registry (Amazon ECR). Give the EKS nodes permission to access the ECR image repository. Use Amazon API Gateway to interact with the application.
○ Migrate the application code to a container that runs in AWS Lambda. Configure Lambda to use an Application Load Balancer (ALB). Use the ALB to interact with the application.

Reference / correct answer:

Migrate the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate by using AWS App2Container. Store container images in Amazon Elastic Container Registry (Amazon ECR). Grant the ECS task execution role permission 10 access the ECR image repository. Configure Amazon ECS to use an Application Load Balancer (ALB). Use the ALB to interact with the application.

Most accepted answer: A. Migrate the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate by using AWS App2Container. Store container images in Amazon Elastic Container Registry (Amazon ECR). Grant the ECS task execution role permission 10 access the ECR image repository. Configure Amazon ECS to use an Application Load Balancer (ALB). Use the ALB to interact with the application.

Community votes: A=12

Selected Answer: A The correct answer would be A, as migrating the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate by using AWS App2Container and storing container images in Amazon Elastic Container Registry (Amazon ECR) would minimize the code changes and administrative overhead required to maintain the servers. This option would allow the company to use the Application Load Balancer (ALB) to interact with the application and the ECS task execution role permission to access the ECR image repository. Option B would require the application code to be migrated to a container that runs in AWS Lambda, which would require more code changes. Option C would require migrating the application to Amazon Elastic Kubernetes Service (Amazon EKS) which would require more administrative overhead. Option D would require configuring Lambda to use an Application Load Balancer (ALB), which is not a native feature of Lambda. upvoted 20 times Musk 3 years, 5 months ago B does not say anything about Lambda. Where have you red that? upvoted 1 times Musk 3 years, 5 months ago You are right, I mixed A with B upvoted 1 times ... ... rbm2023 3 years, 2 months ago There is another problem with Option B, it suggest using EKS with managed node groups and not Fargate, which breaks the requirement for reducing administrative overhead upvoted 1 times ... masetromain 3 years, 6 months ago This solution allows for the existing application code to be packaged into a container, which can then be deployed to ECS on Fargate. The use of AWS App2Container will help automate the containerization process, minimizing the need for code changes. Additionally, by using ECR to store container images, the application can continue to use the same images and dependencies that it currently relies on. The use of an Application Load Balancer (ALB) to interact with the application further simplifies the migration process by allowing the use of the existing application's endpoint. upvoted 4 times ...

B does not say anything about Lambda. Where have you red that? upvoted 1 times Musk 3 years, 5 months ago You are right, I mixed A with B upvoted 1 times ...

You are right, I mixed A with B upvoted 1 times

There is another problem with Option B, it suggest using EKS with managed node groups and not Fargate, which breaks the requirement for reducing administrative overhead upvoted 1 times

This solution allows for the existing application code to be packaged into a container, which can then be deployed to ECS on Fargate. The use of AWS App2Container will help automate the containerization process, minimizing the need for code changes. Additionally, by using ECR to store container images, the application can continue to use the same images and dependencies that it currently relies on. The use of an Application Load Balancer (ALB) to interact with the application further simplifies the migration process by allowing the use of the existing application's endpoint. upvoted 4 times

Question 8 (Topic 1)

A company is running an application in the AWS Cloud. The company's security team must approve the creation of all new IAM users. When a new IAM user is created, all access for the user must be removed automatically. The security team must then receive a notification to approve the user. The company has a multi-Region AWS CloudTrail trail in the AWS account. Which combination of steps will meet these requirements? (Choose three.)

Select an option, then click Submit answer.

○ Create an Amazon EventBridge (Amazon CloudWatch Events) rule. Define a pattern with the detail-type value set to AWS API Call via CloudTrail and an eventName of CreateUser.
○ Configure CloudTrail to send a notification for the CreateUser event to an Amazon Simple Notification Service (Amazon SNS) topic.
○ Invoke a container that runs in Amazon Elastic Container Service (Amazon ECS) with AWS Fargate technology to remove access.
○ Invoke an AWS Step Functions state machine to remove access.
○ Use Amazon Simple Notification Service (Amazon SNS) to notify the security team.
○ Use Amazon Pinpoint to notify the security team.

Reference / correct answer:

Use Amazon Simple Notification Service (Amazon SNS) to notify the security team.

Most accepted answer: E. Use Amazon Simple Notification Service (Amazon SNS) to notify the security team.

Community votes: A=12, B=2, C=4, D=8, E=13

Selected Answer: ADE Event Bus (EventBridge) system to receive event notification (Option A). Step function can get triggered with workflow of doing steps like removing access and sending email etc..(Option D, E) EventBridge enables you to create event rules that match events from different sources, such as AWS services, SaaS applications, custom applications, and other AWS accounts. Once an event rule is triggered, EventBridge can route the event to one or more targets, such as AWS Lambda functions, Amazon SNS topics, Amazon SQS queues, or custom HTTP endpoints. AWS Step Functions supports several AWS services, such as AWS Lambda, Amazon Simple Notification Service (SNS), and Amazon Simple Queue Service (SQS). You can use these services to trigger actions and pass data between steps in your state machine. Pinpoint is chat system which question did not ask, F is wrong. Not C as upvoted 14 times Jay_2pt0_1 3 years, 3 months ago I agree with this. upvoted 1 times ... hobokabobo 3 years, 4 months ago this explanation makes sense to me. upvoted 1 times ...

I agree with this. upvoted 1 times

this explanation makes sense to me. upvoted 1 times

Selected Answer: ADE When a new IAM user is created, CloudTrail logs the CreateUser event. EventBridge matches the event and triggers a Step Functions state machine, which removes access by calling IAM actions like detaching policies or disabling the login profile. The state machine then uses SNS to notify the security team. This architecture is fully serverless, scalable, and provides auditability, fulfilling all requirements from detection to access mitigation and alerting. upvoted 1 times

Selected Answer: ACE I Just do not see any reasoning to use step functions. There is no orchestration is involved here. you Just need lambda or Fargate to remove the access. D does not say anything about lambda step at all i think it is just distractor upvoted 1 times

Question 9 (Topic 1)

A company runs its application in the eu-west-1 Region and has one account for each of its environments: development, testing, and production. All the environments are running 24 hours a day, 7 days a week by using stateful Amazon EC2 instances and Amazon RDS for MySQL databases. The databases are between 500 GB and 800 GB in size. The development team and testing team work on business days during business hours, but the production environment operates 24 hours a day, 7 days a week. The company wants to reduce costs. All resources are tagged with an environment tag with either development, testing, or production as the key. What should a solutions architect do to reduce costs with the LEAST operational effort?

Select an option, then click Submit answer.

○ Create an Amazon EventBridge rule that runs once every day. Configure the rule to invoke one AWS Lambda function that starts or slops instances based on me tag, day, and time.
○ Create an Amazon EventBridge rule that runs every business day in the evening. Configure the rule to invoke an AWS Lambda function that stops instances based on the tag. Create a second EventBridge rule that runs every business day in the morning. Configure the second rule lo invoke another Lambda function that starts instances based on the tag.
○ Create an Amazon EventBridge rule that runs every business day in the evening, Configure the rule to invoke an AWS Lambda function that terminates, instances based on the lag. Create a second EventBridge rule that runs every business day in the morning. Configure the second rule lo invoke another Lambda function that restores the instances from their last backup based on the tag.
○ Create an Amazon EventBridge rule that runs every hour. Configure the rule to invoke one AWS Lambda function that terminates or restores instances from their last backup based on the tag. day, and time.

Reference / correct answer:

Create an Amazon EventBridge rule that runs every business day in the evening. Configure the rule to invoke an AWS Lambda function that stops instances based on the tag. Create a second EventBridge rule that runs every business day in the morning. Configure the second rule lo invoke another Lambda function that starts instances based on the tag.

Most accepted answer: B. Create an Amazon EventBridge rule that runs every business day in the evening. Configure the rule to invoke an AWS Lambda function that stops instances based on the tag. Create a second EventBridge rule that runs every business day in the morning. Configure the second rule lo invoke another Lambda function that starts instances based on the tag.

Community votes: B=10

Selected Answer: B The correct answer is B. Creating an Amazon EventBridge rule that runs every business day in the evening to stop instances and another rule that runs every business day in the morning to start instances based on the tag will reduce costs with the least operational effort. This approach allows for instances to be stopped during non-business hours when they are not in use, reducing the costs associated with running them. It also allows for instances to be started again in the morning when the development and testing teams need to use them. Option A would require the instances to be stopped and started once a day, which could result in instances being stopped while they are in use or not being stopped when they are not in use. Option C would terminate instances during non-business hours and restore them again in the morning, which could lead to data loss or longer start up times. Option D would terminate or restore instances every hour, which could lead to unnecessary costs as well as data loss or longer start up times. upvoted 11 times

Selected Answer: B this is easy. I wish I'll have several of this in the exam. upvoted 9 times

Selected Answer: B B is the better option because it separates the stop and start logic into two EventBridge rules and two simple Lambda functions. This avoids having complex time-based logic inside a single Lambda (like you'd need in A). Even though A uses fewer components, it increases operational overhead by making the Lambda function more complicated to manage and test. With B, each function only does one thing (stop or start) based on tags, and it aligns better with AWS best practices for scheduled automation. Lower code complexity = less maintenance in the long run. upvoted 1 times

Selected Answer: B Stopping instances rather than terminating them ensures that the environment's state can be quickly restored the next day without needing to manage backups or restorations, making it operationally efficient. upvoted 1 times

B. Create an Amazon EventBridge rule that runs every business day in the evening. Configure the rule to invoke an AWS Lambda function that stops instances based on the tag. Create a second EventBridge rule that runs every business day in the morning. Configure the second rule lo invoke another Lambda function that starts instances based on the tag. upvoted 1 times

← Prev 1 2 3 4 5 6 7 8 9 10 Next →

Page 3 of 18

Sale Ends In

2h 0m 0s