SAP-C01 Amazon-Web-Services Exam Questions and Free Practice Test

Question 25

A company has a standard three-tier architecture using two Availability Zones. During the company’s off season, users report that the website is not working. The Solutions Architect finds that no changes have been made to the environment recently, the website is reachable, and it is possible to log in. However, when the Solutions Architect selects the “find a store near you” function, the maps provided on the site by a third-party RESTful API call do not work about 50% of the time after refreshing the page. The outbound API calls are made through Amazon EC2 NAT instances.
What is the MOST likely reason for this failure and how can it be mitigated in the future?

A. The network ACL for one subnet is blocking outbound web traffi

B. Open the network ACL and prevent administration from making future changes through IAM.

C. The fault is in the third-party environmen

D. Contact the third party that provides the maps and request a fix that will provide better uptime.

E. One NAT instance has become overloade

F. Replace both EC2 NAT instances with a larger-sized instance and make sure to account for growth when making the new instance size.

G. One of the NAT instances faile

H. Recommend replacing the EC2 NAT instances with a NAT gateway.

Correct Answer:D
The issue is 50

Question 27

A Solutions Architect must establish a patching plan for a large mixed fleet of Windows and Linux servers. The patching plan must be implemented securely, be audit ready, and comply with the company’s business requirements.
Which option will meet these requirements with MINIMAL effort?

A. Install and use an OS-native patching service to manage the update frequency and release approval for all instance

B. Use AWS Config to verify the OS state on each instance and report on any patch compliance issues.

C. Use AWS Systems Manager on all instances to manage patchin

D. Test patches outside of production and then deploy during a maintenance window with the appropriate approval.

E. Use AWS OpsWorks for Chef Automate to run a set of scripts that will iterate through all instances of a given typ

F. Issue the appropriate OS command to get and install updates on each instance, including any required restarts during the maintenance window.

G. Migrate all applications to AWS OpsWorks and use OpsWorks automatic patching support to keep the OS up-to-date following the initial installatio

H. Use AWS Config to provide audit and compliance reporting.

Correct Answer:B
Only Systems Manager can patch both OS effectively on AWS and on premise.

Question 28

A company has an application that runs a web service on Amazon EC2 instances and stores .jpg images in Amazon S3. The web traffic has a predictable baseline, but often demand spikes unpredictably for short periods of time. The application is loosely coupled and stateless. The .jpg images stored in Amazon S3 are accessed frequently for the first 15 to 20 days, they are seldom accessed thereafter but always need to be immediately available. The CIO has asked to find ways to reduce costs.
Which of the following options will reduce costs? (Choose two.)

A. Purchase Reserved instances for baseline capacity requirements and use On-Demand instances for the demand spikes.

B. Configure a lifecycle policy to move the .jpg images on Amazon S3 to S3 IA after 30 days.

C. Use On-Demand instances for baseline capacity requirements and use Spot Fleet instances for the demand spikes.

D. Configure a lifecycle policy to move the .jpg images on Amazon S3 to Amazon Glacier after 30 days.

E. Create a script that checks the load on all web servers and terminates unnecessary On-Demand instances.

Correct Answer:AB

Question 29

A company collects a steady stream of 10 million data records from 100,000 sources each day. These records are written to an Amazon RDS MySQL DB. A query must produce the daily average of a data source over the past 30 days. There are twice as many reads as writes. Queries to the collected data are for one source ID at a time.
How can the Solutions Architect improve the reliability and cost effectiveness of this solution?

A. Use Amazon Aurora with MySQL in a Multi-AZ mod

B. Use four additional read replicas.

C. Use Amazon DynamoDB with the source ID as the partition key and the timestamp as the sort ke

D. Use a Time to Live (TTL) to delete data after 30 days.

E. Use Amazon DynamoDB with the source ID as the partition ke

F. Use a different table each day.

G. Ingest data into Amazon Kinesis using a retention period of 30 day

H. Use AWS Lambda to write data records to Amazon ElastiCache for read access.

Correct Answer:B
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html

Question 30

A Company has a security event whereby an Amazon S3 bucket with sensitive information was made public. Company policy is to never have public S3 objects, and the Compliance team must be informed immediately when any public objects are identified.
How can the presence of a public S3 object be detected, set to trigger alarm notifications, and automatically remediated in the future? (Choose two.)

A. Turn on object-level logging for Amazon S3. Turn on Amazon S3 event notifications to notify by using an Amazon SNS topic when a PutObject API call is made with a public-read permission.

B. Configure an Amazon CloudWatch Events rule that invokes an AWS Lambda function to secure the S3 bucket.

C. Use the S3 bucket permissions for AWS Trusted Advisor and configure a CloudWatch event to notify by using Amazon SNS.

D. Turn on object-level logging for Amazon S3. Configure a CloudWatch event to notify by using an SNS topic when a PutObject API call with public-read permission is detected in the AWS CloudTrail logs.

E. Schedule a recursive Lambda function to regularly change all object permissions inside the S3 bucket.

Correct Answer:BD
https://aws.amazon.com/blogs/security/how-to-detect-and-automatically-remediate-unintended-permissions-in-a

START SAP-C01 EXAM

Question 25

Question 26

Question 27

Question 28

Question 29

Question 30