SAP-C01 Exam Details

  • Exam Code
    :SAP-C01
  • Exam Name
    :AWS Certified Solutions Architect - Professional (SAP-C01)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :973 Q&As
  • Last Updated
    :Jul 09, 2023

Amazon SAP-C01 Online Questions & Answers

  • Question 751:

    Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance. Which of these options would allow you to encrypt your data at rest? (Choose three.)

    A. Implement third party volume encryption tools
    B. Implement SSL/TLS for all services running on the server
    C. Encrypt data inside your applications before storing it on EBS
    D. Encrypt data using native data encryption drivers at the file system level
    E. Do nothing as EBS volumes are encrypted by default

  • Question 752:

    The user has provisioned the PIOPS volume with an EBS optimized instance.

    Generally speaking, in which I/O chunk should the bandwidth experienced by the user be measured by AWS?

    A. 128 KB
    B. 256 KB
    C. 64 KB
    D. 32 KB

  • Question 753:

    A company is running an Apache Hadoop cluster on Amazon EC2 instances. The Hadoop cluster stores approximately 100 TB of data for weekly operational reports and allows occasional access for data scientists to retrieve data. The company needs to reduce the cost and operational complexity for storing and serving this data.

    Which solution meets these requirements in the MOST cost-effective manner?

    A. Move the Hadoop cluster from EC2 instances to Amazon EMR. Allow data access patterns to remain the same.
    B. Write a script that resizes the EC2 instances to a smaller instance type during downtime and resizes the instances to a larger instance type before the reports are created.
    C. Move the data to Amazon S3 and use Amazon Athena to query the data for reports. Allow the data scientists to access the data directly in Amazon S3.
    D. Migrate the data to Amazon DynamoDB and modify the reports to fetch data from DynamoDB. Allow the data scientists to access the data directly in DynamoDB.

  • Question 754:

    A company is using a lift-and-shift strategy to migrate applications from several on- premises Windows servers to AWS. The Windows servers will be hosted on Amazon EC2 instances in the us-east-1 Region.

    The company's security policy allows the installation of migration tools on servers. The migration data must be encrypted in transit and encrypted at rest. The applications are business critical. The company needs to minimize the cutover

    window and minimize the downtime that results from the migration. The company wants to use Amazon CloudWatch and AWS CloudTrail for monitoring.

    Which solution will meet these requirements?

    A. Use AWS Application Migration Service (CloudEnsure Migration) to migrate the Windows servers to AWS. Create a Replication Settings template. Install the AWS Replication Agent on the source servers
    B. Use AWS DataSync to migrate the Windows servers to AWS. Install the DataSync agent on the source servers. Configure a blueprint for the target servers. Begin the replication process.
    C. Use AWS Server Migration Service (AWS SMS) to migrate the Windows servers to AWS. Install the SMS Connector on the source servers. Replicate the source servers to AWS. Convert the replicated volumes to AMIs to launch EC2 instances.
    D. Use AWS Migration Hub to migrate the Windows servers to AWS. Create a project in Migration Hub. Track the progress of server migration by using the built-in dashboard.

  • Question 755:

    You are responsible for a web application that consists of an Elastic Load Balancing (ELB) load balancer in front of an Auto Scaling group of Amazon Elastic Compute Cloud (EC2) instances. For a recent deployment of a new version of the application, a new Amazon Machine Image (AMI) was created, and the Auto Scaling group was updated with a new launch configuration that refers to this new AMI. During the deployment, you received complaints from users that the website was responding with errors. All instances passed the ELB health checks.

    What should you do in order to avoid errors for future deployments? (Choose two.)

    A. Add an Elastic Load Balancing health check to the Auto Scaling group. Set a short period for the health checks to operate as soon as possible in order to prevent premature registration of the instance to the load balancer.
    B. Enable EC2 instance CloudWatch alerts to change the launch configuration's AMI to the previous one. Gradually terminate instances that are using the new AMI.
    C. Set the Elastic Load Balancing health check configuration to target a part of the application that fully tests application health and returns an error if the tests fail.
    D. Create a new launch configuration that refers to the new AMI, and associate it with the group. Double the size of the group, wait for the new instances to become healthy, and reduce back to the original size. If new instances do not become healthy, associate the previous launch configuration.
    E. Increase the Elastic Load Balancing Unhealthy Threshold to a higher value to prevent an unhealthy instance from going into service behind the load balancer.

  • Question 756:

    A Solutions Architect must migrate an existing on-premises web application with 70 TB of static files supporting a public open-data initiative. The Architect wants to upgrade to the latest version of the host operating system as part of the migration effort.

    Which is the FASTEST and MOST cost-effective way to perform the migration?

    A. Run a physical-to-virtual conversion on the application server. Transfer the server image over the internet, and transfer the static data to Amazon S3.
    B. Run a physical-to-virtual conversion on the application server. Transfer the server image over AWS Direct Connect, and transfer the static data to Amazon S3.
    C. Re-platform the server to Amazon EC2, and use AWS Snowball to transfer the static data to Amazon S3.
    D. Re-platform the server by using the AWS Server Migration Service to move the code and data to a new Amazon EC2 instance.

  • Question 757:

    A company currently uses a single 1 Gbps AWS Direct Connect connection to establish connectivity between an AWS Region and its data center. The company has five Amazon VPCs, all of which are connected to the data center using the same Direct Connect connection. The Network team is worried about the single point of failure and is interested in improving the redundancy of the connections to AWS while keeping costs to a minimum.

    Which solution would improve the redundancy of the connection to AWS while meeting the cost requirements?

    A. Provision another 1 Gbps Direct Connect connection and create new VIFs to each of the VPCs. Configure the VIFs in a load balancing fashion using BGP.
    B. Set up VPN tunnels from the data center to each VPC. Terminate each VPN tunnel at the virtual private gateway (VGW) of the respective VPC and set up BGP for route management.
    C. Set up a new point-to-point Multiprotocol Label Switching (MPLS) connection to the AWS Region that's being used. Configure BGP to use this new circuit as passive, so that no traffic flows through this unless the AWS Direct Connect fails.
    D. Create a public VIF on the Direct Connect connection and set up a VPN tunnel which will terminate on the virtual private gateway (VGW) of the respective VPC using the public VIF. Use BGP to handle the failover to the VPN connection.

  • Question 758:

    An organization is setting up RDS for their applications. The organization wants to secure RDS access with VPC. Which of the following options is not required while designing the RDS with VPC?

    A. The organization must create a subnet group with public and private subnets. Both the subnets can be in the same or separate AZ.
    B. The organization should keep minimum of one IP address in each subnet reserved for RDS failover.
    C. If the organization is connecting RDS from the internet it must enable the VPC attributes DNS hostnames and DNS resolution.
    D. The organization must create a subnet group with VPC using more than one subnet which are a part of separate AZs.

  • Question 759:

    You are the new IT architect in a company that operates a mobile sleep tracking application.

    When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to your backend.

    The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB table.

    Every morning, you scan the table to extract and aggregate last night's data on a per user basis, and store the results in Amazon S3. Users are notified via Amazon SNS mobile push notifications that new data is available, which is parsed and

    visualized by the mobile app.

    Currently you have around 100k users who are mostly based out of North America.

    You have been tasked to optimize the architecture of the backend system to lower cost.

    What would you recommend? (Choose two.)

    A. Have the mobile app access Amazon DynamoDB directly Instead of JSON files stored on Amazon S3.
    B. Write data directly into an Amazon Redshift cluster replacing both Amazon DynamoDB and Amazon S3.
    C. Introduce an Amazon SQS queue to buffer writes to the Amazon DynamoDB table and reduce provisioned write throughput.
    D. Introduce Amazon Elasticache to cache reads from the Amazon DynamoDB table and reduce provisioned read throughput.
    E. Create a new Amazon DynamoDB table each day and drop the one for the previous day after its data is on Amazon S3.

  • Question 760:

    Someone has recommended a new client to you and you know he is into online gaming and you are almost certain he will want to set up an online gaming site which will require a database service that provides fast and predictable performance with seamless scalability.

    Which of the following AWS databases would be best suited to an online gaming site?

    A. Amazon SimpleDB
    B. Amazon DynamoDB
    C. Amazon Redshift
    D. Amazon ElastiCache

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAP-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.