Amazon SAP-C02 AWS Certified Solutions Architect - Professional Exam Exam Practice Test Questions

• Question 1

  A company is preparing to deploy an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for a workload. The company expects the cluster to support anunpredictable number of stateless pods. Many of the pods will be created during a short time period as the workload automatically scales the number of replicas that the workload uses.Which solution will MAXIMIZE node resilience?

  • Use a separate launch template to deploy the EKS control plane into a second cluster that is separate from the workload node groups.
  • Update the workload node groups. Use a smaller number of node groups and larger instances in the node groups.
  • Configure the Kubernetes Cluster Autoscaler to ensure that the compute capacity of the workload node groups stays under provisioned.
  • Configure the workload to use topology spread constraints that are based on Availability Zone.

  Show Answer Answer: D Next

• Question 2

  A company is building an application on AWS. The application sends logs to an Amazon Elasticsearch Service (Amazon ES) cluster for analysis. All data must be stored within a VPC.Some of the company's developers work from home. Other developers work from three different company office locations. The developers need to accessAmazon ES to analyze and visualize logs directly from their local development machines.Which solution will meet these requirements?

  • Configure and set up an AWS Client VPN endpoint. Associate the Client VPN endpoint with a subnet in the VPC. Configure a Client VPN self-service portal. Instruct the developers to connect by using the client for Client VPN.
  • Create a transit gateway, and connect it to the VPC. Create an AWS Site-to-Site VPN. Create an attachment to the transit gateway. Instruct the developers to connect by using an OpenVPN client.
  • Create a transit gateway, and connect it to the VPC. Order an AWS Direct Connect connection. Set up a public VIF on the Direct Connect connection. Associate the public VIF with the transit gateway. Instruct the developers to connect to the Direct Connect connection
  • Create and configure a bastion host in a public subnet of the VPC. Configure the bastion host security group to allow SSH access from the company CIDR ranges. Instruct the developers to connect by using SSH.

  Show Answer Answer: A Next

• Question 3

  A company runs a serverless application in a single AWS Region. The application accesses external URLs and extracts metadata from those sites. The company uses an Amazon Simple Notification Service (Amazon SNS) topic to publish URLs to an Amazon Simple Queue Service (Amazon SQS) queue An AWS Lambda function uses the queue as an event source and processes the URLs from the queue Results are saved to an Amazon S3 bucketThe company wants to process each URL other Regions to compare possible differences in site localization URLs must be published from the existing Region. Results must be written to the existing S3 bucket in the current Region.Which combination of changes will produce multi-Region deployment that meets these requirements? (Select TWO.)

  • Deploy the SOS queue with the Lambda function to other Regions.
  • Subscribe the SNS topic in each Region to the SQS queue.
  • Subscribe the SQS queue in each Region to the SNS topics in each Region.
  • Configure the SQS queue to publish URLs to SNS topics in each Region.
  • Deploy the SNS topic and the Lambda function to other Regions.

  Show Answer Answer: A, C Next

• Question 4

  A company's interactive web application uses an Amazon CloudFront distribution to serve images from an Amazon S3 bucket. Occasionally, third-party tools ingest corrupted images into the S3 bucket. This image corruption causes a poor user experience in the application later. The company has successfully implemented and tested Python logic to detect corrupt images.A solutions architect must recommend a solution to integrate the detection logic with minimal latency between the ingestion and serving.Which solution will meet these requirements?

  • Use a Lambda@Edge function that is invoked by a viewer-response event.
  • Use a Lambda@Edge function that is invoked by an origin-response event.
  • Use an S3 event notification that invokes an AWS Lambda function.
  • Use an S3 event notification that invokes an AWS Step Functions state machine.

  Show Answer Answer: B Next

• Question 5

  A company is running a serverless application that consists of several AWS Lambda functions and Amazon DynamoDB tables. The company has created new functionality that requires the Lambda functions to access an Amazon Neptune DB cluster. The Neptune DB cluster is located in three subnets in a VPC.Which of the possible solutions will allow the Lambda functions to access the Neptune DB cluster and DynamoDB tables? (Select TWO.)

  • Create three public subnets in the Neptune VPC, and route traffic through an internet gateway. Host the Lambda functions in the three new public subnets.
  • Create three private subnets in the Neptune VPC, and route internet traffic through a NAT gateway. Host the Lambda functions in the three new private subnets.
  • Host the Lambda functions outside the VPC. Update the Neptune security group to allow access from the IP ranges of the Lambda functions.
  • Host the Lambda functions outside the VPC. Create a VPC endpoint for the Neptune database, and have the Lambda functions access Neptune over the VPC endpoint.
  • Create three private subnets in the Neptune VPC. Host the Lambda functions in the three new isolated subnets. Create a VPC endpoint for DynamoDB, and route DynamoDB traffic to the VPC endpoint.

  Show Answer Answer: B, E Next