SAP-C01 Free Practice Test

A company has developed a web application that runs on Amazon EC2 instances in one AWS Region. The company has taken on new business in other countries and must deploy its application into other to meet low-latency requirements for its users. The regions can be segregated, and an application running in one region does not need to communicate with instances in other regions.
How should the company’s Solutions Architect automate the deployment of the application so that it can be MOST efficiently deployed into multiple regions?

1. A. Write a bash script that uses the AWS CLI to query the current state in one region and output a JSON representatio
2. B. Pass the JSON representation to the AWS CLI, specifying the --region parameter to deploy the application to other regions.
3. C. Write a bash script that uses the AWS CLI to query the current state in one region and output an AWS CloudFormation templat
4. D. Create a CloudFormation stack from the template by using the AWS CLI, specifying the --region parameter to deploy the application to other regions.
5. E. Write a CloudFormation template describing the application’s infrastructure in the resources section.Create a CloudFormation stack from the template by using the AWS CLI, specify multiple regions using the --regions parameter to deploy the application.
6. F. Write a CloudFormation template describing the application’s infrastructure in the Resources section.Use a CloudFormation stack set from an administrator account to launch stack instances that deploy the application to other regions.

Correct Answer: D
A stack set lets you create stacks in AWS accounts across regions by using a single AWS CloudFormation template. All the resources included in each stack are defined by the stack set\'s AWS CloudFormation template. As you create the stack set, you specify the template to use, as well as any parameters and
capabilities that template requires. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html
https://sanderknape.com/2017/07/cloudformation-stacksets-automated-cross-account-region-deployments/

An enterprise runs 103 line-of-business applications on virtual machines in an on-premises data center. Many of the applications are simple PHP, Java, or Ruby web applications, are no longer actively developed, and serve little traffic.
Which approach should be used to migrate these applications to AWS with the LOWEST infrastructure costs ?

1. A. Deploy the applications to single-instance AWS Elastic Beanstalk environments without a load balancer.
2. B. Use AWS SMS to create AMIs for each virtual machine and run them in Amazon EC2.
3. C. Convert each application to a Docker image and deploy to a small Amazon ECS cluster behind an Application Load Balancer.
4. D. Use VM Import/Export to create AMIs for each virtual machine and run them in single-instance AWS Elastic Beanstalk environments by configuring a custom image.

Correct Answer: A
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features-managing-env-types.html

A company is migrating a subset of its application APIs from Amazon EC2 instances to run on a serverless infrastructure. The company has set up Amazon API Gateway, AWS Lambda, and Amazon DynamoDB for the new application. The primary responsibility of the Lambda function is to obtain data from a third-party Software as a Service (SaaS) provider. For consistency, the Lambda function is attached to the same virtual private cloud (VPC) as the original EC2 instances.
Test users report an inability to use this newly moved functionality, and the company is receiving 5xx errors from API Gateway. Monitoring reports from the SaaS provider shows that the requests never made it to its systems. The company notices that Amazon CloudWatch Logs are being generated by the Lambda functions. When the same functionality is tested against the EC2 systems, it works as expected.
What is causing the issue?

1. A. Lambda is in a subnet that does not have a NAT gateway attached to it to connect to the SaaS provider.
2. B. The end-user application is misconfigured to continue using the endpoint backed by EC2 instances.
3. C. The throttle limit set on API Gateway is too low and the requests are not making their way through.
4. D. API Gateway does not have the necessary permissions to invoke Lambda.

Correct Answer: A

A company that is new to AWS reports it has exhausted its service limits across several accounts that are on the Basic Support plan. The company would like to prevent this from happening in the future.
What is the MOST efficient way of monitoring and managing all service limits in the company’s accounts?

1. A. Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, provide notifications using Amazon SNS if the limits are close to exceeding the threshold.
2. B. Reach out to AWS Support to proactively increase the limits across all account
3. C. That way, the customer avoids creating and managing infrastructure just to raise the service limits.
4. D. Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, programmatically increase the limits that are close to exceeding the threshold.
5. E. Use Amazon CloudWatch and AWS Lambda to periodically calculate the limits across all linked accounts using AWS Trusted Advisor, and use Amazon SNS for notifications if a limit is close to exceeding the threshol
6. F. Ensure that the accounts are using the AWS Business Support plan at a minimum.

Correct Answer: D
https://github.com/awslabs/aws-limit-monitor https://aws.amazon.com/solutions/limit-monitor/

A Solutions Architect must design a highly available, stateless, REST service. The service will require multiple persistent storage layers for service object meta information and the delivery of content. Each request needs to be authenticated and securely processed. There is a requirement to keep costs as low as possible?
How can these requirements be met?

1. A. Use AWS Fargate to host a container that runs a self-contained REST servic
2. B. Set up an Amazon ECS service that is fronted by an Application Load Balancer (ALB). Use a custom authenticator to control access to the AP
3. C. Store request meta information in Amazon DynamoDB with Auto Scaling and static content in a secured S3 bucke
4. D. Make secure signed requests for Amazon S3 objects and proxy the data through the REST service interface.
5. E. Use AWS Fargate to host a container that runs a self-contained REST servic
6. F. Set up an ECS service that is fronted by a cross-zone AL
7. G. Use an Amazon Cognito user pool to control access to the AP
8. H. Store request meta information in DynamoDB with Auto Scaling and static content in a secured S3 bucke
9. I. Generate presigned URLs when returning references to content stored in Amazon S3.
10. J. Set up Amazon API Gateway and create the required API resources and method
11. K. Use an Amazon Cognito user pool to control access to the AP
12. L. Configure the methods to use AWS Lambda proxy integrations, and process each resource with a unique AWS Lambda functio
13. M. Store request meta information in DynamoDB with Auto Scaling and static content in a secured S3 bucke
14. N. Generate presigned URLs when returning references to content stored in Amazon S3.
15. O. Set up Amazon API Gateway and create the required API resources and method
16. P. Use an Amazon API Gateway custom authorizer to control access to the AP
17. Q. Configure the methods to use AWS Lambda custom integrations, and process each resource with a unique Lambda functio
18. R. Store request meta information in an Amazon ElastiCache Multi-AZ cluster and static content in a secured S3 bucke
19. S. Generate presigned URLs when returning references to content stored in Amazon S3.

Correct Answer: C