Amazon SAP-C01 Online Practice Questions and Exam Preparation

Amazon SAP-C01 Online Questions & Answers

• Question 921:

  A bucket owner has allowed another account's IAM users to upload or access objects in his bucket. The IAM user of Account A is trying to access an object created by the IAM user of account B. What will happen in this scenario?

  A. It is not possible to give permission to multiple IAM users
  B. AWS S3 will verify proper rights given by the owner of Account A, the bucket owner as well as by the IAM user B to the object
  C. The bucket policy may not be created as S3 will give error due to conflict of Access Rights
  D. It is not possible that the IAM user of one account accesses objects of the other IAM user
  B. AWS S3 will verify proper rights given by the owner of Account A, the bucket owner as well as by the IAM user B to the object

• Question 922:

  A user has created a VPC with CIDR 20.0.0.0/16 using the VPC wizard. The user has created public and VPN only subnets along with hardware VPN access to connect to the user's data center. The user has not yet launched any instance as well as modified or deleted any setup. He wants to delete this VPC from the console.

  Will the console allow the user to delete the VPC?

  A. Yes, the user can detach the virtual private gateway and then use the VPC console to delete the VPC.
  B. No, since the NAT instance is running, the user cannot delete the VPC.
  C. Yes, the user can use the CLI to delete the VPC that will detach the virtual private gateway automatically.
  D. No, the VPC console needs to be accessed using an administrator account to delete the VPC.
  A. Yes, the user can detach the virtual private gateway and then use the VPC console to delete the VPC.

• Question 923:

  A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks. The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS

  Organizations. The SaaS platform uses many AWS resources globally.

  For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Create a new AWS CloudTrail trail. Use an existing Amazon S3 bucket in the organization's management account to store the logs. Deploy the trail to all AWS Regions. Enable MFA delete and encryption on the S3 bucket.
  B. Create a new AWS CloudTrail trail in each member account of the organization. Create new Amazon S3 buckets to store the logs. Deploy the trail to all AWS Regions. Enable MFA delete and encryption on the S3 buckets.
  C. Create a new AWS CloudTrail trail in the organization's management account. Create a new Amazon S3 bucket with versioning turned on to store the logs. Deploy the trail for all accounts in the organization. Enable MFA delete and encryption on the S3 bucket.
  D. Create a new AWS CloudTrail trail in the organization's management account. Create a new Amazon S3 bucket to store the logs. Configure Amazon Simple Notification Service (Amazon SNS) to send log-file delivery notifications to an external management system that will track the logs. Enable MFA delete and encryption on the S3 bucket.
  D. Create a new AWS CloudTrail trail in the organization's management account. Create a new Amazon S3 bucket to store the logs. Configure Amazon Simple Notification Service (Amazon SNS) to send log-file delivery notifications to an external management system that will track the logs. Enable MFA delete and encryption on the S3 bucket.

• Question 924:

  In Amazon ElastiCache, the failure of a single cache node can have an impact on the availability of your application and the load on your back-end database while ElastiCache provisions a replacement for the failed cache node and it get repopulated.

  Which of the following is a solution to reduce this potential availability impact?

  A. Spread your memory and compute capacity over fewer number of cache nodes, each with smaller capacity.
  B. Spread your memory and compute capacity over a larger number of cache nodes, each with smaller capacity.
  C. Include fewer number of high capacity nodes.
  D. Include a larger number of cache nodes, each with high capacity.
  B. Spread your memory and compute capacity over a larger number of cache nodes, each with smaller capacity.

• Question 925:

  A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned CloudWatch endpoint URLs should the user use?

  A. monitoring.us-east-1a.amazonaws.com
  B. cloudwatch.us-east-1a.amazonaws.com
  C. monitoring.us-east-1.amazonaws.com
  D. monitoring.us-east-1-a.amazonaws.com
  C. monitoring.us-east-1.amazonaws.com

• Question 926:

  A company is designing a data processing platform to process a large number of files in an Amazon S3 bucket and store the results in Amazon DynamoDB. These files will be processed once and must be retained for 1 year. The company wants to ensure that the original files and resulting data are highly available in multiple AWS Regions.

  Which solution will meet these requirements?

  A. Create an S3 CreateObject event notification to copy the file to Amazon Elastic Block Store (Amazon EBS). Use AWS DataSync to sync the files between EBS volumes in multiple Regions. Use an Amazon EC2 Auto Scaling group in multiple Regions to attach the EBS volumes. Process the files and store the results in a DynamoDB global table in multiple Regions. Configure the S3 bucket with an S3 Lifecycle policy to move the files to S3 Glacier after 1 year.
  B. Create an S3 CreateObject event notification to copy the file to Amazon Elastic File System (Amazon EFS). Use AWS DataSync to sync the files between EFS volumes in multiple Regions. Use an AWS Lambda function to process the EFS files and store the results in a DynamoDB global table in multiple Regions. Configure the S3 buckets with an S3 Lifecycle policy to move the files to S3 Glacier after 1 year.
  C. Copy the files to an S3 bucket in another Region by using cross-Region replication. Create an S3 CreateObject event notification on the original bucket to push S3 file paths into Amazon EventBridge (Amazon CloudWatch Events). Use an AWS Lambda function to poll EventBridge (CloudWatch Events) to process each file and store the results in a DynamoDB table in each Region. Configure both S3 buckets to use the S3 Standard-Infrequent Access (S3 Standard-IA) storage class and an S3 Lifecycle policy to delete the files after 1 year.
  D. Copy the files to an S3 bucket in another Region by using cross-Region replication. Create an S3 CreateObject event notification on the original bucket to execute an AWS Lambda function to process each file and store the results in a DynamoDB global table in multiple Regions. Configure both S3 buckets to use the S3 Standard-Infrequent Access (S3 Standard-IA) storage class and an S3 Lifecycle policy to delete the files after 1 year.
  D. Copy the files to an S3 bucket in another Region by using cross-Region replication. Create an S3 CreateObject event notification on the original bucket to execute an AWS Lambda function to process each file and store the results in a DynamoDB global table in multiple Regions. Configure both S3 buckets to use the S3 Standard-Infrequent Access (S3 Standard-IA) storage class and an S3 Lifecycle policy to delete the files after 1 year.

• Question 927:

  Does Autoscaling automatically assign tags to resources?

  A. No, not unless they are configured via API.
  B. Yes, it does.
  C. Yes, by default.
  D. No, it does not.
  B. Yes, it does.

• Question 928:

  A company has a primary Amazon S3 bucket that receives thousands of objects every day. The company needs to replicate these objects into several other S3 buckets from various AWS accounts. A solutions architect is designing a new AWS Lambda function that is triggered when an object is created in the main bucket and replicates the object into the target buckets. The objects do not need to be replicated in real time. There is concern that this function may impact other critical Lambda functions due to Lambda's regional concurrency limit.

  How can the solutions architect ensure this new Lambda function will not impact other critical Lambda functions?

  A. Set the new Lambda function reserved concurrency limit to ensure the executions do not impact other critical Lambda functions. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric.
  B. Increase the execution timeout of the new Lambda function to 5 minutes. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric.
  C. Configure S3 event notifications to add events to an Amazon SQS queue in a separate account. Create the new Lambda function in the same account as the SQS queue and trigger the function when a message arrives in the queue.
  D. Ensure the new Lambda function implements an exponential backoff algorithm. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric.
  A. Set the new Lambda function reserved concurrency limit to ensure the executions do not impact other critical Lambda functions. Monitor existing critical Lambda functions with Amazon CloudWatch alarms for the Throttles Lambda metric.

• Question 929:

  A large financial company is deploying applications that consist of Amazon EC2 and Amazon RDS instances to the AWS Cloud using AWS CloudFormation. The CloudFormation stack has the following stack policy:

  

  The company wants to ensure that developers do not lose data by accidentally removing or replacing RDS instances when updating the CloudFormation stack. Developers also still need to be able to modify or remove EC2 instances as needed.

  How should the company change the stack policy to meet these requirements?

  A. Modify the statement to specify "Effect": "Deny", "Action":["Update:*"] for all logical RDS resources.
  B. Modify the statement to specify "Effect": "Deny", "Action":["Update:Delete"] for all logical RDS resources.
  C. Add a second statement that specifies "Effect": "Deny", "Action":["Update:Delete", "Update:Replace"] for all logical RDS resources.
  D. Add a second statement that specifies "Effect": "Deny", "Action":["Update:*"] for all logical RDS resources.
  C. Add a second statement that specifies "Effect": "Deny", "Action":["Update:Delete", "Update:Replace"] for all logical RDS resources.

• Question 930:

  A user is planning to launch multiple EC2 instance same as current running instance.

  Which of the below mentioned parameters is not copied by Amazon EC2 in the launch wizard when the user has selected the option "Launch more like this"?

  A. Termination protection
  B. Tenancy setting
  C. Storage
  D. Shutdown behavior
  C. Storage