Online Access Free SAP-C02 Exam Questions

A media company is serving video files stored in Amazon S3 using Amazon CloudFront. The development team needs access to the logs to diagnose faults and perform service monitoring.
The log files from CloudFront may contain sensitive information about users.
The company uses a log processing service to remove sensitive information before making the logs available to the development team. The company has the following requirements for the unprocessed logs:
- The logs must be encrypted at rest and must be accessible by the log
processing service only.
- Only the data protection team can control access to the unprocessed
log files.
- AWS CloudFormation templates must be stored in AWS CodeCommit.
- AWS CodePipeline must be triggered on commit to perform updates made
to CloudFormation templates.
- CloudFront is already writing the unprocessed logs to an Amazon S3
bucket, and the log processing service is operating against this S3
bucket.
Which combination of steps should a solutions architect take to meet the company's requirements? (Choose two.)

• A.Create an AWS KMS key that allows the AWS Logs Delivery account to generate data keys for encryption Configure S3 default encryption to use server-side encryption with KMS managed keys (SSE- KMS) on the log storage bucket using the new KMS key.
  Modify the KMS key policy to allow the log processing service to perform decrypt operations.
• B.Create a new CodeCommit repository for the AWS KMS key template.
  Create an IAM policy to allow commits to the new repository and attach it to the data protection team's users.
  Create a new CodePipeline pipeline with a custom IAM role to perform KMS key updates using CloudFormation Modify the KMS key policy to allow the CodePipeline IAM role to modify the key policy.
• C.Configure S3 default encryption to use AWS KMS managed keys (SSE-KMS) on the log storage bucket using the AWS Managed S3 KMS key.
  Modify the KMS key policy to allow the CloudFront service role to generate data keys for encryption Modify the KMS key policy to allow the log processing service to perform decrypt operations.
• D.Use the existing CodeCommit repository for the AWS KMS key template.
  Create an IAM policy to allow commits to the new repository and attach it to the data protection team's users.
  Modify the existing CodePipeline pipeline to use a custom IAM role and to perform KMS key updates using CloudFormation.
  Modify the KMS key policy to allow the CodePipeline IAM role to modify the key policy.
• E.Create an AWS KMS key that follows the CloudFront service role to generate data keys for encryption Configure S3 default encryption to use KMS managed keys (SSE-KMS) on the log storage bucket using the new KMS key Modify the KMS key policy to allow the log processing service to perform decrypt operations.

The company needs to determine which costs on the monthly AWS bill are attributable to each application or team. The company also must be able to create reports to compare costs from the last 12 months and to help forecast costs for the next 12 months. A solutions architect must recommend an AWS Billing and Cost Management solution that provides these cost reports.
Which combination of actions will meet these requirements? (Choose three.)

• A.Create a cost category for each application in Billing and Cost Management.
• B.Activate IAM access to Billing and Cost Management.
• C.Enable Cost Explorer.
• D.Activate the user-defined cost allocation tags that represent the application and the team.
• E.Create a cost budget.
• F.Activate the AWS generated cost allocation tags that represent the application and the team.

A company has on-premises workloads. The company needs a hybrid networking solution that provides on-premises access to petabytes of cloud storage. The company needs a hybrid cloud storage service that provides secure data transfer from on premises to an Amazon S3 bucket.
The service must use a private connection. The company has deployed a VPC and an AWS Direct Connect connection.
Which solution will meet these requirements?

• A.Create a public VIF. Create an interface endpoint for Amazon S3. Deploy an Amazon S3 File Gateway VM on premises. Create a file share that uses Amazon S3 as the storage backend. Use AWS PrivateLink to access the S3 bucket from the on-premises network.
• B.Create a transit VIF. Create an Amazon File Cache file system. Create a data repository association to link the file system to the S3 bucket. Download and install the Amazon File Cache Container Storage Interface (CSI) driver on the on-premises machines.
• C.Create a private VIF. Create an Amazon ElastiCache file system. Create a data repository association to link the file system to the S3 bucket. Use AWS Transfer Family for SFTP to access the S3 bucket.
• D.Create a private VIF. Create an Amazon EFS file system. Create a mount target to the S3 bucket.
  Download and install the Amazon EFS client on the on-premises machines.

A company has an application that stores user-uploaded videos in an Amazon S3 bucket using S3 Standard storage. Users access videos frequently for the first 180 days, and rarely after that.
Most videos are over 100 MB. Users often have poor internet connectivity, and the company uses multipart uploads.
A solutions architect needs tooptimize S3 storage costs. Which combination of actions will meet these requirements? ((Choose two.)

• A.Create a lifecycle rule to transition objects toS3 Standard-IA after 180 days.
• B.Create a lifecycle rule to transition objects toS3 Glacier Instant Retrieval after 1 day.
• C.Use S3 Transfer Acceleration to upload the videos.
• D.Create a lifecycle rule to expireincomplete multipart uploadsafter 7 days.
• E.Configure the S3 bucket to be a Requester Pays bucket.

A company runs an IoT application in the AWS Cloud. The company has millions of sensors that collect data from houses in the United States. The sensors use the MQTT protocol to connect and send data to a custom MQTT broker. The MQTT broker stores the data on a single Amazon EC2 instance. The sensors connect to the broker through the domain named iot.example.com.
The company uses Amazon Route 53 as its DNS service. The company stores the data in Amazon DynamoDB.
On several occasions, the amount of data has overloaded the MQTT broker and has resulted in lost sensor data. The company must improve the reliability of the solution.
Which solution will meet these requirements?

• A.Create a Network Load Balancer (NLB). Set the MQTT broker as the target. Create an AWS Global Accelerator accelerator. Set the NLB as the endpoint for the accelerator. Update the DNS record in Route 53 to a multivalue answer record. Set the Global Accelerator IP addresses as values. Use the MQTT broker to store the data.
• B.Set up AWS IoT Core to receive the sensor data. Create and configure a custom domain to connect to AWS IoT Core. Update the DNS record in Route 53 to point to the AWS IoT Core Data-ATS endpoint. Configure an AWS IoT rule to store the data.
• C.Set up AWS IoT Greengrass to receive the sensor data. Update the DNS record in Route 53 to point to the AWS IoT Greengrass endpoint. Configure an AWS IoT rule to invoke an AWS Lambda function to store the data.
• D.Create an Application Load Balancer (ALB) and an Auto Scaling group for the MQTT broker. Use the Auto Scaling group as the target for the ALB. Update the DNS record in Route 53 to an alias record. Point the alias record to the ALB. Use the MQTT broker to store the data.