Amazon Amazon Certifications SAP-C01 Questions & Answers

• Question 541:

  A company has an application that runs a web service on Amazon EC2 instances and stores .jpg images in Amazon S3. The web traffic has a predictable baseline, but often demand spikes unpredictably for short periods of time. The application is loosely coupled and stateless. The .jpg images stored in Amazon S3 are accessed frequently for the first 15 to 20 days, they are seldom accessed thereafter but always need to be immediately available. The CIO has asked to find ways to reduce costs.

  Which of the following options will reduce costs? (Choose two.)

  A. Purchase Reserved instances for baseline capacity requirements and use On-Demand instances for the demand spikes.

  B. Configure a lifecycle policy to move the .jpg images on Amazon S3 to S3 IA after 30 days.

  C. Use On-Demand instances for baseline capacity requirements and use Spot Fleet instances for the demand spikes.

  D. Configure a lifecycle policy to move the .jpg images on Amazon S3 to Amazon Glacier after 30 days.

  E. Create a script that checks the load on all web servers and terminates unnecessary On-Demand instances.

  Correct Answer: AB

• Question 542:

  A Solutions Architect is designing the storage layer for a recently purchased application. The application will be running on Amazon EC2 instances and has the following layers and requirements:

  1.

  Data layer: A POSIX file system shared across many systems.

  2.

  Service layer: Static file content that requires block storage with more than 100k IOPS.

  Which combination of AWS services will meet these needs? (Choose two.)

  A. Data layer - Amazon S3

  B. Data layer - Amazon EC2 Ephemeral Storage

  C. Data layer - Amazon EFS

  D. Service layer - Amazon EBS volumes with Provisioned IOPS

  E. Service layer - Amazon EC2 Ephemeral Storage

  Correct Answer: CE

• Question 543:

  The Solutions Architect manages a serverless application that consists of multiple API gateways, AWS Lambda functions, Amazon S3 buckets, and Amazon DynamoDB tables. Customers say that a few application components slow while loading dynamic images, and some are timing out with the "504 Gateway Timeout" error. While troubleshooting the scenario, the Solutions Architect confirms that DynamoDB monitoring metrics are at acceptable levels.

  Which of the following steps would be optimal for debugging these application issues? (Choose two.)

  A. Parse HTTP logs in Amazon API Gateway for HTTP errors to determine the root cause of the errors.

  B. Parse Amazon CloudWatch Logs to determine processing times for requested images at specified intervals.

  C. Parse VPC Flow Logs to determine if there is packet loss between the Lambda function and S3.

  D. Parse AWS X-Ray traces and analyze HTTP methods to determine the root cause of the HTTP errors.

  E. Parse S3 access logs to determine if objects being accessed are from specific IP addresses to narrow the scope to geographic latency issues.

  Correct Answer: BD

  Firstly "A 504 Gateway Timeout Error means your web server didn't receive a timely response from another server upstream when it attempted to load one of your web pages. Put simply, your web servers aren't communicating with each other fast enough". This specific issue is addressed in the AWS article "Tracing, Logging and Monitoring an API Gateway API".

  Reference: https://docs.amazonaws.cn/en_us/apigateway/latest/developerguide/monitoring_overview.html

• Question 544:

  A company uses Amazon S3 to store documents that may only be accessible to an Amazon EC2 instance in a certain virtual private cloud (VPC). The company fears that a malicious insider with access to this instance could also set up an EC2 instance in another VPC to access these documents.

  Which of the following solutions will provide the required protection?

  A. Use an S3 VPC endpoint and an S3 bucket policy to limit access to this VPC endpoint.

  B. Use EC2 instance profiles and an S3 bucket policy to limit access to the role attached to the instance profile.

  C. Use S3 client-side encryption and store the key in the instance metadata.

  D. Use S3 server-side encryption and protect the key with an encryption context.

  Correct Answer: B

• Question 545:

  A Solutions Architect is working with a company that operates a standard three-tier web application in AWS. The web and application tiers run on Amazon EC2 and the database tier runs on Amazon RDS. The company is redesigning the web and application tiers to use Amazon API Gateway and AWS Lambda, and the company intends to deploy the new application within 6 months. The IT Manager has asked the Solutions Architect to reduce costs in the interim.

  Which solution will be MOST cost effective while maintaining reliability?

  A. Use Spot Instances for the web tier, On-Demand Instances for the application tier, and Reserved Instances for the database tier.

  B. Use On-Demand Instances for the web and application tiers, and Reserved Instances for the database tier.

  C. Use Spot Instances for the web and application tiers, and Reserved Instances for the database tier.

  D. Use Reserved Instances for the web, application, and database tiers.

  Correct Answer: B

• Question 546:

  A company runs a legacy system on a single m4.2xlarge Amazon EC2 instance with Amazon EBS storage. The EC2 instance runs both the web server and a self-managed Oracle database. A snapshot is made of the EBS volume every 12 hours, and an AMI was created from the fully configured EC2 instance. A recent event that terminated the EC2 instance led to several hours of downtime. The application was successfully launched from the AMI, but the age of the EBS snapshot and the repair of the database resulted in the loss of 8 hours of data. The system was also down for 4 hours while the Systems Operators

  manually performed these processes.

  What architectural changes will minimize downtime and reduce the chance of lost data?

  A. Create an Amazon CloudWatch alarm to automatically recover the instance. Create a script that will check and repair the database upon reboot. Subscribe the Operations team to the Amazon SNS message generated by the CloudWatch alarm.

  B. Run the application on m4.xlarge EC2 instances behind an Elastic Load Balancer/Application Load Balancer. Run the EC2 instances in an Auto Scaling group across multiple Availability Zones with a minimum instance count of two. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.

  C. Run the application on m4.2xlarge EC2 instances behind an Elastic Load Balancer/Application Load Balancer. Run the EC2 instances in an Auto Scaling group across multiple Availability Zones with a minimum instance count of one. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.

  D. Increase the web server instance count to two m4.xlarge instances and use Amazon Route 53 round-robin load balancing to spread the load. Enable Route 53 health checks on the web servers. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.

  Correct Answer: B

  Reference: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

• Question 547:

  In Amazon CloudWatch, you can publish your own metrics with the put-metric-data command. When you create a new metric using the put-metric-data command, it can take up to two minutes before you can retrieve statistics on the new metric using the get-metric-statistics command.

  How long does it take before the new metric appears in the list of metrics retrieved using the list- metrics command?

  A. After 2 minutes

  B. Up to 15 minutes

  C. More than an hour

  D. Within a minute

  Correct Answer: B

  You can publish your own metrics to CloudWatch with the put-metric-data command (or its Query API equivalent PutMetricData). When you create a new metric using the put-metric-data command, it can take up to two minutes before you can retrieve statistics on the new metric using the get-metric-statistics command. However, it can take up to fifteen minutes before the new metric appears in the list of metrics retrieved using the list-metrics command.

  Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

• Question 548:

  After your Lambda function has been running for some time, you need to look at some metrics to ascertain how your function is performing and decide to use the AWS CLI to do this.

  Which of the following commands must be used to access these metrics using the AWS CLI?

  A. mon-list-metrics and mon-get-stats

  B. list-metrics and get-metric-statistics

  C. ListMetrics and GetMetricStatistics

  D. list-metrics and mon-get-stats

  Correct Answer: B

  AWS Lambda automatically monitors functions on your behalf, reporting metrics through Amazon

  CloudWatch.

  To access metrics using the AWS CLI

  Use the list-metrics and get-metric-statistics commands.

  Reference:

  http://docs.aws.amazon.com/lambda/latest/dg/monitoring-functions-access-metrics.html

• Question 549:

  Which of the following is not included in the metrics sent from Billing to Amazon CloudWatch?

  A. Recurring fees for AWS products and services

  B. Total AWS charges

  C. One-time charges and refunds

  D. Usage charges for AWS products and services

  Correct Answer: C

  Usage charges and recurring fees for AWS products and services are included in the metrics sent from

  Billing to Amazon CloudWatch.

  You will have a metric for total AWS charges, as well as one additional metric for each AWS product or

  service that you use.

  However, one-time charges and refunds are not included.

  Reference: https://aws.amazon.com/blogs/aws/monitor-estimated-costs-using-amazon-cloudwatch-billing-metrics-andalarms

• Question 550:

  A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI.

  Which of the below mentioned CloudWatch endpoint URLs should the user use?

  A. monitoring.us-east-1a.amazonaws.com

  B. cloudwatch.us-east-1a.amazonaws.com

  C. monitoring.us-east-1.amazonaws.com

  D. monitoring.us-east-1-a.amazonaws.com

  Correct Answer: C

  The CloudWatch resources are always region specific and they will have the end point as region specific. If the user is trying to access the metric in the US-East-1 region, the endpoint URL will be: monitoring.useast-1.amazonaws.com

  Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/regions_endpoints.html