SAP-C01 Exam Details

  • Exam Code
    :SAP-C01
  • Exam Name
    :AWS Certified Solutions Architect - Professional (SAP-C01)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :973 Q&As
  • Last Updated
    :Jul 09, 2023

Amazon SAP-C01 Online Questions & Answers

  • Question 951:

    A company wants to migrate a 30 TB Oracle data warehouse from on premises to Amazon Redshift. The company used the AWS Schema Conversion Tool (AWS SCT) to convert the schema of the existing data warehouse to an Amazon

    Redshift schema. The company also used a migration assessment report to identify manual tasks to complete.

    The company needs to migrate the data to the new Amazon Redshift cluster during an upcoming data freeze period of 2 weeks. The only network connection between the on-premises data warehouse and AWS is a 50 Mbps internet

    connection.

    Which migration strategy meets these requirements?

    A. Create an AWS Database Migration Service (AWS DMS) replication instance. Authorize the public IP address of the replication instance to reach the data warehouse through the corporate firewall. Create a migration task to run at the beginning of the fata freeze period.
    B. Install the AWS SCT extraction agents on the on-premises servers. Define the extract, upload, and copy tasks to send the data to an Amazon S3 bucket. Copy the data into the Amazon Redshift cluster. Run the tasks at the beginning of the data freeze period.
    C. Install the AWS SCT extraction agents on the on-premises servers. Create a Site-to-Site VPN connection. Create an AWS Database Migration Service (AWS DMS) replication instance that is the appropriate size. Authorize the IP address of the replication instance to be able to access the on-premises data warehouse through the VPN connection.
    D. Create a job in AWS Snowball Edge to import data into Amazon S3. Install AWS SCT extraction agents on the on-premises servers. Define the local and AWS Database Migration Service (AWS DMS) tasks to send the data to the Snowball Edge device. When the Snowball Edge device is returned to AWS and the data is available in Amazon S3, run the AWS DMS subtask to copy the data to Amazon Redshift.

  • Question 952:

    In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning Pack are only available with __________.

    A. Oracle Standard Edition
    B. Oracle Express Edition
    C. Oracle Enterprise Edition
    D. None of these

  • Question 953:

    Do you need to use Amazon Cognito to use the Amazon Mobile Analytics service?

    A. No. However, it is recommend by AWS to use Amazon Cognito for security best practices.
    B. Yes. You need to use it only if you have IAM root access.
    C. No. You cannot use it at all, and you need to use AWS IAM accounts.
    D. Yes. It is recommended by AWS to use Amazon Cognito to use Amazon Mobile Analytics service.

  • Question 954:

    An organization is planning to use NoSQL DB for its scalable data needs. The organization wants to host an application securely in AWS VPC. What action can be recommended to the organization?

    A. The organization should setup their own NoSQL cluster on the AWS instance and configure route tables and subnets.
    B. The organization should only use a DynamoDB because by default it is always a part of the default subnet provided by AWS.
    C. The organization should use a DynamoDB while creating a table within the public subnet.
    D. The organization should use a DynamoDB while creating a table within a private subnet.

  • Question 955:

    A company has an application that generates reports and stores them in an Amazon bucket Amazon S3 bucket. When a user accesses their report, the application generates a signed URL to allow the user to download the report. The company's security team has discovered that the files are public and that anyone can download them without authentication. The company has suspended the generation of new reports until the problem is resolved.

    Which set of action will immediately remediate the security issue without impacting the application's normal workflow?

    A. Create an AWS Lambda function that applies all policy for users who are not authenticated. Create a scheduled event to invoke the Lambda function.
    B. Review the AWS Trusted advisor bucket permissions check and implement the recommend actions.
    C. Run a script that puts a Private ACL on all of the object in the bucket.
    D. Use the Block Public Access feature in Amazon S3 to set the IgnorePublicAcis option to TRUE on the bucket.

  • Question 956:

    A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts. The company's information security policy states that the S3 bucket must not be accessed over the public internet

    and that each application should have the minimum permissions necessary to function.

    To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application.

    Which combination of steps should the solutions architect take to implement this solution? (Choose two.)

    A. Create an S3 access point for each application in the AWS account that owns the S3 bucket. Configure each access point to be accessible only from the application's VPC. Update the bucket policy to require access from an access point
    B. Create an interface endpoint for Amazon S3 in each application's VPC. Configure the endpoint policy to allow access to an S3 access point. Create a VPC gateway attachment for the S3 endpoint
    C. Create a gateway endpoint for Amazon S3 in each application's VPC. Configure the endpoint policy to allow access to an S3 access point. Specify the route table that is used to access the access point.
    D. Create an S3 access point for each application in each AWS account and attach the access points to the S3 bucket. Configure each access point to be accessible only from the application's VPC. Update the bucket policy to require access from an access point.
    E. Create a gateway endpoint for Amazon S3 in the data lake's VPC. Attach an endpoint policy to allow access to the S3 bucket. Specify the route table that is used to access the bucket

  • Question 957:

    A company is migrating a legacy application from an on-premises data center to AWS. The application consists of a single application server and a Microsoft SQL Server database server. Each server is deployed on a VMware VM that

    consumes 500 TB of data across multiple attached volumes.

    The company has established a 10 Gbps AWS Direct Connect connection from the closest AWS Region to its on-premises data center. The Direct Connect connection is not currently in use by other services.

    Which combination of steps should a solutions architect take to migrate the application with the LEAST amount of downtime? (Choose two.)

    A. Use an AWS Server Migration Service (AWS SMS) replication job to migrate the database server VM to AWS.
    B. Use VM Import/Export to import the application server VM.
    C. Export the VM images to an AWS Snowball Edge Storage Optimized device.
    D. Use an AWS Server Migration Service (AWS SMS) replication job to migrate the application server VM to AWS.
    E. Use an AWS Database Migration Service (AWS DMS) replication instance to migrate the database to an Amazon RDS DB instance.

  • Question 958:

    A user has suspended the scaling process on the Auto Scaling group. A scaling activity to increase the instance count was already in progress. What effect will the suspension have on that activity?

    A. No effect. The scaling activity continues
    B. Pauses the instance launch and launches it only after Auto Scaling is resumed
    C. Terminates the instance
    D. Stops the instance temporary

  • Question 959:

    For Amazon EC2 issues, while troubleshooting AWS CloudFormation, you need to view the cloud-init and cfn logs for more information. Identify a directory to which these logs are published.

    A. /var/opt/log/ec2
    B. /var/log/lastlog
    C. /var/log/
    D. /var/log/ec2

  • Question 960:

    A company runs a three-tier application in AWS. Users report that the application performance can vary greatly depending on the time of day and functionality being accessed.

    The application includes the following components:

    1.

    Eight t2.large front-end web servers that serve static content and proxy dynamic content from the application tier.

    2.

    Four t2.large application servers.

    3.

    One db.m4.large Amazon RDS MySQL Multi-AZ DB instance.

    Operations has determined that the web and application tiers are network constrained.

    Which of the following is a cost effective way to improve application performance? (Choose two.)

    A. Replace web and app tiers with t2.xlarge instances
    B. Use AWS Auto Scaling and m4.large instances for the web and application tiers
    C. Convert the MySQL RDS instance to a self-managed MySQL cluster on Amazon EC2
    D. Create an Amazon CloudFront distribution to cache content
    E. Increase the size of the Amazon RDS instance to db.m4.xlarge

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAP-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.