SAP-C02 exam dumps: questions 401 to 500 of 677

Correct answers: A, B, E

• A. Correct.

  Enabling Multi-AZ for the RDS MySQL database provides high availability within the primary Region by automatically failing over to a standby instance in another Availability Zone during failures. This is necessary but does not protect against regional failures.

• B. Correct.

  Deploying the application stack in a second AWS Region ensures redundancy in case the primary Region becomes unavailable. Configuring Route 53 latency-based routing allows traffic to be directed to the Region with the lowest latency, ensuring optimal user experience and disaster recovery.

• C. Incorrect.

  AWS Global Accelerator can be used for multi-region traffic routing, but it is not a direct requirement for this scenario. Route 53 latency-based routing is sufficient for disaster recovery and high availability.

• D. Incorrect.

  Launching EC2 instances across multiple Availability Zones within the primary Region provides fault tolerance at the AZ level but does not protect against regional outages, which is a requirement in this scenario.

• E. Correct.

  Configuring a read replica of the Amazon RDS database in a second Region ensures data replication across Regions. Promoting the replica to master during a disaster enables the application to maintain database functionality in the secondary Region.

Correct answers: A, B, D, F

• A. Correct.

  Enabling AWS X-Ray tracing is a best practice for monitoring and troubleshooting Lambda functions. It provides insights into performance and execution traces, making it easier to debug and optimize the application.

• B. Correct.

  Configuring reserved concurrency for the Lambda function ensures that the application does not overwhelm downstream services during high traffic, maintaining system stability.

• C. Incorrect.

  While Amazon CloudTrail captures API activity, it is not intended for detailed application logging. Amazon CloudWatch Logs is the appropriate service for Lambda function logs.

• D. Correct.

  A dead-letter queue (DLQ) captures events that fail to process, allowing for debugging and reprocessing, which is a crucial component of error handling and resilience.

• E. Incorrect.

  Amazon S3 is not a logging service. Lambda function logs should be sent to Amazon CloudWatch Logs by default, and additional custom logging can be implemented if needed.

• F. Correct.

  Enhanced fan-out for Kinesis Data Streams allows dedicated throughput for consumers, reducing latency and improving performance for high-throughput applications.

Correct answer: B

• A. Incorrect.

  Elastic Load Balancing (ELB) with cross-region load balancing is not necessary as the workload is confined to a single region. Cross-region load balancing does not optimize low-latency communication within a region.

• B. Correct.

  Cluster placement groups are specifically designed to optimize low-latency communication between EC2 instances by grouping them closely within the same Availability Zone. This is the most suitable option for the given requirements.

• C. Incorrect.

  Enhanced networking via Elastic Network Adapter (ENA) improves network performance, but it does not address the low-latency communication requirement as effectively as a cluster placement group.

• D. Incorrect.

  Migrating the workload to Amazon ECS with Service Auto Scaling is not directly related to optimizing network performance or low-latency communication. It focuses more on managing containerized workloads and scaling.

Correct answers: A, B

• A. Correct.

  Enabling S3 Object Lock with Compliance Mode ensures the data cannot be modified or deleted during the retention period, meeting the regulatory requirements for immutability and retention.

• B. Correct.

  Enabling default encryption on the S3 bucket with an AWS KMS key ensures that data is encrypted at rest, addressing the requirement for encryption.

• C. Incorrect.

  AWS Backup is not suitable for meeting the specific immutability and retention requirements for data stored in S3. While it can back up resources, it does not provide the same level of regulatory compliance as S3 Object Lock.

• D. Incorrect.

  S3 Versioning and lifecycle policies are useful for managing cost and retaining object versions, but they do not enforce strict immutability or regulatory compliance requirements for sensitive data.

• E. Incorrect.

  Glacier Vault Lock is used for long-term archive storage, but it is not suitable for ensuring compliance directly on S3 objects or providing encryption at rest.

Correct answers: A, D

• A. Correct.

  Correct: Amazon S3 with Object Lock in Compliance mode ensures data immutability, while SSE-S3 provides server-side encryption at rest, and SSL enforces encryption in transit.

• B. Incorrect.

  Incorrect: Governance mode of Object Lock allows authorized users to bypass the lock, which does not meet strict immutability requirements for regulatory compliance.

• C. Incorrect.

  Incorrect: AWS Backup does not inherently provide immutability or the full set of compliance features required. It is better suited for backup and recovery use cases.

• D. Correct.

  Correct: Amazon S3 with Object Lock in Compliance mode ensures data immutability, while SSE-KMS provides enhanced encryption at rest with customer-managed keys, and TLS ensures encryption in transit.

• E. Incorrect.

  Incorrect: Amazon EFS is not designed for long-term archival storage with immutability and does not meet the regulatory compliance requirements for this scenario.