Amazon SAP-C01 Online Practice Questions and Exam Preparation

Amazon SAP-C01 Online Questions & Answers

• Question 71:

  A user is planning to host a Highly Available system on the AWS VPC. Which of the below mentioned statements is helpful in this scenario?

  A. Create VPC subnets in two separate availability zones and launch instances in different subnets.
  B. Create VPC with only one public subnet and launch instances in different AZs using that subnet.
  C. Create two VPCs in two separate zones and setup failover with ELB such that if one VPC fails it will divert traffic to another VPC.
  D. Create VPC with only one private subnet and launch instances in different AZs using that subnet.
  A. Create VPC subnets in two separate availability zones and launch instances in different subnets.

• Question 72:

  You have been given the task to define multiple AWS Data Pipeline schedules for different activities in the same pipeline. Which of the following would successfully accomplish this task?

  A. Creating multiple pipeline definition files
  B. Defining multiple pipeline definitions in your schedule objects file and associating the desired schedule to the correct activity via its schedule field
  C. Defining multiple schedule objects in your pipeline definition file and associating the desired schedule to the correct activity via its schedule field
  D. Defining multiple schedule objects in the schedule field
  C. Defining multiple schedule objects in your pipeline definition file and associating the desired schedule to the correct activity via its schedule field

• Question 73:

  A user is using CloudFormation to launch an EC2 instance and then configure an application after the instance is launched. The user wants the stack creation of ELB and AutoScaling to wait until the EC2 instance is launched and configured properly.

  How can the user configure this?

  A. The user can use the DependentCondition resource to hold the creation of the other dependent resources.
  B. It is not possible that the stack creation will wait until one service is created and launched.
  C. The user can use the HoldCondition resource to wait for the creation of the other dependent resources.
  D. The user can use the WaitCondition resource to hold the creation of the other dependent resources.
  D. The user can use the WaitCondition resource to hold the creation of the other dependent resources.

• Question 74:

  How much memory does the cr1.8xlarge instance type provide?

  A. 224 GB
  B. 124 GB
  C. 184 GB
  D. 244 GB
  D. 244 GB

• Question 75:

  A company hosts an application on Amazon EC2 instance and needs to store files in Amazon S3. The files should never traverse the public internet, and only the application EC2 instances are granted access to a specific Amazon S3 bucket. A solutions architect has created a VPC endpoint for Amazon S3 and connected the endpoint to the application VPC.

  Which additional steps should the solutions architect take to meet these requirements?

  A. Assign an endpoint policy to the endpoint that restricts access to a specific S3 bucket. Attach a bucket policy to the S3 bucket that grants access to the VPC endpoint. Add the gateway prefix list to a NACL of the instances to limit access to the application EC2 instances only.
  B. Attach a bucket policy to the S3 bucket that grants access to application EC2 instances only using the aws:SourceIp condition. Update the VPC route table so only the application EC2 instances can access the VPC endpoint.
  C. Assign an endpoint policy to the VPC endpoint that restricts access to a specific S3 bucket. Attach a bucket policy to the S3 bucket that grants access to the VPC endpoint. Assign an IAM role to the application EC2 instances and only allow access to this role in the S3 bucket's policy.
  D. Assign an endpoint policy to the VPC endpoint that restricts access to S3 in the current Region. Attach a bucket policy to the S3 bucket that grants access to the VPC private subnets only. Add the gateway prefix list to a NACL to limit access to the application EC2 instances only.
  C. Assign an endpoint policy to the VPC endpoint that restricts access to a specific S3 bucket. Attach a bucket policy to the S3 bucket that grants access to the VPC endpoint. Assign an IAM role to the application EC2 instances and only allow access to this role in the S3 bucket's policy.

• Question 76:

  A company has a new application that needs to run on five Amazon EC2 instances in a single AWS Region. The application requires high-throughput, low-latency network connections between all of the EC2 instances where the application will run. There is no requirement for the application to be fault tolerant.

  Which solution will meet these requirements?

  A. Launch five new EC2 instances into a cluster placement group. Ensure that the EC2 instance type supports enhanced networking.
  B. Launch five new EC2 instances into an Auto Scaling group in the same Availability Zone. Attach an extra elastic network interface to each EC2 instance.
  C. Launch five new EC2 instances into a partition placement group. Ensure that the EC2 instance type supports enhanced networking.
  D. Launch five new EC2 instances into a spread placement group. Attach an extra elastic network interface to each EC2 instance.
  A. Launch five new EC2 instances into a cluster placement group. Ensure that the EC2 instance type supports enhanced networking.

• Question 77:

  A company wants to deploy an AWS WAF solution to manage AWS WAF rules across multiple AWS accounts. The accounts are managed under different OUs in AWS Organizations.

  Administrators must be able to add or remove accounts or OUs from managed AWS WAF rule sets as needed Administrators also must have the ability to automatically update and remediate noncompliant AWS WAF rules in all accounts.

  Which solution meets these requirements with the LEAST amount of operational overhead?

  A. Use AWS Firewall Manager to manage AWS WAF rules across accounts in the organization. Use an AWS Systems Manager Parameter Store parameter to store account numbers and OUs to manage Update the parameter as needed to add or remove accounts or OUs Use an Amazon EventBridge (Amazon CloudWatch Events) rule to identify any changes to the parameter and to invoke an AWS Lambda function to update the security policy in the Firewall Manager administrative account
  B. Deploy an organization-wide AWS Config rule that requires all resources in the selected OUs to associate the AWS WAF rules. Deploy automated remediation actions by using AWS Lambda to fix noncompliant resources Deploy AWS WAF rules by using an AWS CloudFormation stack set to target the same OUs where the AWS Config rule is applied.
  C. Create AWS WAF rules in the management account of the organization Use AWS Lambda environment variables to store account numbers and OUs to manage Update environment variables as needed to add or remove accounts or OUs Create cross-account IAM roles in member accounts Assume the rotes by using AWS Security Token Service (AWS STS) in the Lambda function to create and update AWS WAF rules in the member accounts.
  D. Use AWS Control Tower to manage AWS WAF rules across accounts in the organization Use AWS Key Management Service (AWS KMS) to store account numbers and OUs to manage Update AWS KMS as needed to add or remove accounts or OUs Create IAM users in member accounts Allow AWS Control Tower in the management account to use the access key and secret access key to create and update AWS WAF rules in the member accounts
  B. Deploy an organization-wide AWS Config rule that requires all resources in the selected OUs to associate the AWS WAF rules. Deploy automated remediation actions by using AWS Lambda to fix noncompliant resources Deploy AWS WAF rules by using an AWS CloudFormation stack set to target the same OUs where the AWS Config rule is applied.

• Question 78:

  A company is storing data on Amazon Simple Storage Service (S3). The company's security policy mandates that data is encrypted at rest. Which of the following methods can achieve this? (Choose three.)

  A. Use Amazon S3 server-side encryption with AWS Key Management Service managed keys.
  B. Use Amazon S3 server-side encryption with customer-provided keys.
  C. Use Amazon S3 server-side encryption with EC2 key pair.
  D. Use Amazon S3 bucket policies to restrict access to the data at rest.
  E. Encrypt the data on the client-side before ingesting to Amazon S3 using their own master key.
  F. Use SSL to encrypt the data while in transit to Amazon S3.
  A. Use Amazon S3 server-side encryption with AWS Key Management Service managed keys.
  B. Use Amazon S3 server-side encryption with customer-provided keys.
  E. Encrypt the data on the client-side before ingesting to Amazon S3 using their own master key.

• Question 79:

  How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?

  A. Detach the volume and attach it to another EC2 instance in the other AZ.
  B. Simply create a new volume in the other AZ and specify the original volume as the source.
  C. Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ.
  D. Detach the volume, then use the ec2-migrate-volume command to move it to another AZ.
  C. Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ.

• Question 80:

  A company has several teams, and each team has their own Amazon RDS database that totals 100 TB. The company is building a data query platform for Business Intelligence Analysts to generate a weekly business report. The new system must run ad-hoc SQL queries.

  What is the MOST cost-effective solution?

  A. Create a new Amazon Redshift cluster. Create an AWS Glue ETL job to copy data from the RDS databases to the Amazon Redshift cluster. Use Amazon Redshift to run the query.
  B. Create an Amazon EMR cluster with enough core nodes. Run an Apache Spark job to copy data from the RDS databases to a Hadoop Distributed File System (HDFS). Use a local Apache Hive metastore to maintain the table definition. Use Spark SQL to run the query.
  C. Use an AWS Glue ETL job to copy all the RDS databases to a single Amazon Aurora PostgreSQL database. Run SQL queries on the Aurora PostgreSQL database.
  D. Use an AWS Glue crawler to crawl all the databases and create tables in the AWS Glue Data Catalog. Use an AWS Glue ETL job to load data from the RDS databases to Amazon S3, and use Amazon Athena to run the queries.
  A. Create a new Amazon Redshift cluster. Create an AWS Glue ETL job to copy data from the RDS databases to the Amazon Redshift cluster. Use Amazon Redshift to run the query.