SAP-C01 Free Practice Test

An online retailer needs to regularly process large product catalogs, which are handled in batches. These are sent out to be processed by people using the Amazon Mechanical Turk service, but the retailer has asked its Solutions Architect to design a workflow orchestration system that allows it to handle multiple concurrent Mechanical Turk operations, deal with the result assessment process, and reprocess failures.
Which of the following options gives the retailer the ability to interrogate the state of every workflow with the LEAST amount of implementation effort?

1. A. Trigger Amazon CloudWatch alarms based upon message visibility in multiple Amazon SQS queues (one queue per workflow stage) and send messages via Amazon SNS to trigger AWS Lambda functions to process the next ste
2. B. Use Amazon ES and Kibana to visualize Lambda processing logs to see the workflow states.
3. C. Hold workflow information in an Amazon RDS instance with AWS Lambda functions polling RDS for status change
4. D. Worker Lambda functions then process the next workflow step
5. E. Amazon QuickSight will visualize workflow states directly out of Amazon RDS.
6. F. Build the workflow in AWS Step Functions, using it to orchestrate multiple concurrent workflow
7. G. The status of each workflow can be visualized in the AWS Management Console, and historical data can be written to Amazon S3 and visualized using Amazon QuickSight.
8. H. Use Amazon SWF to create a workflow that handles a single batch of catalog records with multiple worker tasks to extract the data, transform it, and send it through Mechanical Tur
9. I. Use Amazon ES and Kibana to visualize AWS Lambda processing logs to see the workflow states.

Correct Answer: C
AWS Step Functions is a fully managed service that makes it easy to coordinate the components of distributed applications and microservices using visual workflows. Instead of writing a Decider program, you define state machines in JSON. AWS customers should consider using Step Functions for new applications. If Step Functions does not fit your needs, then you should consider Amazon Simple Workflow (SWF). Amazon SWF provides you complete control over your orchestration logic, but increases the complexity of developing applications. You may write decider programs in the programming language of your choice, or you may use the Flow framework to use programming constructs that structure asynchronous interactions for you. AWS will continue to provide the Amazon SWF service, Flow framework, and support all Amazon SWF customers. https://aws.amazon.com/swf/faqs/

A company receives clickstream data files to Amazon S3 every five minutes. A Python script runs as a cron job once a day on an Amazon EC2 instance to process each file and load it into a database hosted on Amazon RDS. The cron job takes 15 to 30 minutes to process 24 hours of data. The data consumers ask for the data be available as soon as possible.
Which solution would accomplish the desired outcome?

1. A. Increase the size of the instance to speed up processing and update the schedule to run once an hour.
2. B. Convert the cron job to an AWS Lambda function and trigger this new function using a cron job on an EC2 instance.
3. C. Convert the cron job to an AWS Lambda function and schedule it to run once an hour using Amazon CloudWatch events.
4. D. Create an AWS Lambda function that runs when a file is delivered to Amazon S3 using S3 event notifications.

Correct Answer: D
https://docs.aws.amazon.com/lambda/latest/dg/with-s3.html

A large multinational company runs a timesheet application on AWS that is used by staff across the world. The application runs on Amazon EC2 instances in an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer, and stores in an Amazon RDS MySQL Multi-AZ database instance.
The CFO is concerned about the impact on the business if the application is not available. The application must not be down for more than two hours, but the solution must be as cost-effective as possible.
How should the Solutions Architect meet the CFO’s requirements while minimizing data loss?

1. A. In another region, configure a read replica and create a copy of the infrastructur
2. B. When an issue occurs, promote the read replica and configure as an Amazon RDS Multi-AZ database instanc
3. C. Update the DNS to point to the other region’s ELB.
4. D. Configure a 1-day window of 60-minute snapshots of the Amazon RDS Multi-AZ database instance.Create an AWS CloudFormation template of the application infrastructure that uses the latest snapsho
5. E. When an issue occurs, use the AWS CloudFormation template to create the environment in another regio
6. F. Update the DNS record to point to the other region’s ELB.
7. G. Configure a 1-day window of 60-minute snapshots of the Amazon RDS Multi-AZ database instance which is copied to another regio
8. H. Crate an AWS CloudFormation template of the application infrastructure that uses the latest copied snapsho
9. I. When an issue occurs, use the AWS CloudFormation template to create the environment in another regio
10. J. Update the DNS record to point to the other region’s ELB.
11. K. Configure a read replica in another regio
12. L. Create an AWS CloudFormation template of the application infrastructur
13. M. When an issue occurs, promote the read replica and configure as an Amazon RDSMulti-AZ database instance and use the AWS CloudFormation template to create the environment in another region using the promoted Amazon RDS instanc
14. N. Update the DNS record to point to the other region’s ELB.

Correct Answer: D

A financial services company logs personality identifiable information to its application logs stored in Amazon S3. Due to regulatory compliance requirements, the log files must be encrypted at rest. The Security team has mandated that the company’s on-premises hardware security modules (HSMs) be used to generate the CMK material.
Which steps should the Solution Architected take to meet these requirements?

1. A. Create an AWS CloudHSM cluste
2. B. Create a new CMK in AWS KMS using AWS_CloudHSM as the source for the key material and an origin of AWS-CLOUDHS
3. C. Enable automatic key rotation on the CMK with a duration of 1 yea
4. D. Configure a bucket policy on the logging bucket the disallow uploads of unencrypted data and requires that the encryption source be AWS KMS.
5. E. Provision AN AWS Direct Connect connection, ensuring there is no overlap of the RFC 1918 address space between on-premises hardware and the VP
6. F. Configure an AWS bucket policy on the logging bucket requires all objects to be key material, and create a unique CMK for each logging event.
7. G. Create a CMK in AWS KMS with no key material and an origin of EXTERNA
8. H. Import the key material generated from the on-premises HSMs into the CMK using the public key and import token provided by AW
9. I. Configure a bucket policy on the logging bucket that disallows uploads ofnon-encrypted data and requires that the encryption source be AWS KMS.
10. J. Create a new CMK in AWS KMS with AWS-provided key material and an origin of AWS-KM
11. K. Disable this CMK, and overwrite the key material with the material from the on-premises HSM using the public key and import token provided by AWS Re-enable the CM
12. L. Enable automatic, key rotation on the CMK with a duration of 1 yea
13. M. Configure a bucket policy on the logging bucket that disallows uploads of non-encrypted data and requires that the encryption source be AWS KMS.

Correct Answer: A

A company’s CISO has asked a Solutions Architect to re-engineer the company’s current CI/CD practices to make sure patch deployments to its applications can happen as quickly as possible with minimal downtime if vulnerabilities are discovered. The company must also be able to quickly roll back a change in case of errors. The web application is deployed in a fleet of Amazon EC2 instances behind an Application Load Balancer. The company is currently using GitHub to host the application source code and has configured an AWS CodeBuild project to build the application. The company also intends to use AWS CodePipeLine to trigger builds form GitHub commits using the existing CodeBuild project.
What CI/CD configuration meets all of the requirements?

1. A. Configure CodePipeline with a deploy stage using AWS CodeDeploy configured for in-place deploymen
2. B. Monitor the newly deployed code, and if there are any issues, push another code update.
3. C. Configure CodePipeline with a deploy stage using AWS CodeDeploy configure for blue/green deployment
4. D. Monitor the new deployed code and if there are any issues, trigger a manual rollback using CodeDeploy.
5. E. Configure CodePipeline with a deploy stage using AWS CloudFormation to create a pipeline for test and production stack
6. F. Monitor the newly deployed cod and if there are any issues push another code update.
7. G. Configure the CodePipeline with a deploy stage using AWS OpsWorks and in-place deployments.Monitor the newly deployed code and if there are any issues, push another code update.

Correct Answer: B