Design for New Solutions

SAP-C02 · 87 questions

• A city mandates that all new networking and IAM baselines be deployed from a CI pipeline using infrastructure as code, not console click-ops. Which approach best meets that change-control requirement?
• A citizen payments API must support instant rollback if a new release fails health checks. Which deployment strategy best meets that requirement?
• A county wants fleets to stay patched and configuration-consistent without operators SSHing into snowflake servers. Which AWS approach best supports that configuration-management goal?
• A small municipal IT shop runs a custom ticket-binder service on self-managed servers and spends too much time patching the queue layer. What change best reduces infrastructure provisioning and patching overhead?
• Change management requires human approvals before production OU deploys, while sandbox accounts may deploy continuously. How should the deployment strategy align?
• A legacy Elastic Beanstalk civic app must move toward containers with an upgrade path that stages features and supports rollback. Which approach best fits?
• A city wants ML inference for permit-image checks but lacks staff to build and operate GPU clusters. Which design best delegates that complexity?
• A permitting fleet must upgrade reliably. Leadership prefers images that are baked in CI over long-lived golden images patched in place. Which pattern should the architect choose?
• Build and test run in a shared tools account, but production lives in separate accounts. How should CI/CD deploy safely across those accounts?
• An internal low-risk municipal wiki can accept brief downtime, but tax-filing-week services cannot. How should deployment strategies differ?
• Baseline IAM roles must be pushed to every account under the city’s OUs from the management plane. Which IaC pattern best fits org-scale deployment?
• A 24/7 utilities outage map must stay available during upgrades. Which combination best reduces downtime?
• Staging often differs from production, causing “works in staging” failures for a grants portal. What design best prevents that configuration drift?
• The next 311 mobile API release must roll back automatically when health degrades. Which mechanism best meets that requirement?
• Citizens must reach a DR Region when the primary Region fails health checks. Which DNS design best supports that continuity?
• Vital records require a documented RPO that automated database protection must meet across Regions. Which approach best fits?
• Emergency operations leadership needs evidence that disaster recovery designs meet real RTO targets. What practice best validates continuity?
• Court evidence retention requires automated backups across EBS, RDS, and EFS with immutability controls on the vault. Which design best meets that need?
• The mayoral grants portal has an RTO that backup-and-restore alone cannot meet, but full active-active is too costly. Which DR scenario best fits?
• GIS basemap services need a cost-conscious continuity design: keep data replication on, but minimize the app tier until disaster. Which scenario fits?
• Statewide emergency messaging requires multi-site active-active operation with dual-Region writes and low-latency citizen access. Which design elements are essential?
• When Availability Zone degradation threatens municipal workloads, recovery should start without waiting for a ticket queue. Which approach best uses centralized monitoring for recovery?
• A city archives department stores low-priority historical photo scans that can tolerate days of downtime after a loss. Leadership wants the most cost-effective continuity design that still meets a long RTO. Which approach best fits?
• A county constituent portal must remain available if an entire AWS Region fails. Architects currently run Multi-AZ inside one Region and assume that covers regional outages. What should they redesign for Region-level disruption?
• A municipal IT team must fail a large fleet of on-premises Windows applications into AWS after a data-center incident, with continuous block-level replication and orchestrated recovery. Which AWS approach best matches this hybrid DR need?
• A multi-Region public permitting portal should send residents to the nearest healthy Region for both latency and continuity. Which Route 53 approach best supports that goal?
• Ransomware operators who compromise a city's workload account may try to delete local snapshots and backups. Which backup design best keeps archives recoverable after that pattern?
• A utilities billing database runs Multi-AZ RDS, but the city has never practiced failover and has no tested runbooks. What continuity gap should architects close first?
• A seasonal parks reservation system needs continuity for peak summer demand but must stay cost-aware in the off-season. Which DR capacity approach best balances continuity and cost?
• A new city permit API needs IAM roles that separate read-only auditors, deployment pipelines, and runtime application tasks. Which design best follows least privilege?
• A new citizen services web tier sits behind an Application Load Balancer. Security wants host-level allow rules for HTTPS from the load balancer only, plus subnet-level explicit denies for known malicious CIDRs. How should SG and NACL responsibilities be split?
• A high-profile municipal elections results site expects volumetric DDoS and sophisticated Layer 7 abuse on election night. Which mitigation strategy best fits?
• All new S3 buckets that store resident personal data must default to strong encryption at rest and must not be publicly accessible. Which baseline best meets that requirement?
• A new courts case-management stack must call AWS APIs and shared internal services without traversing the public internet where policy forbids it. Which endpoint pattern should architects specify?
• A new benefits portal stores database usernames and passwords for its application tier. Security forbids secrets in environment files or container images. Which credential approach best fits?
• A city is standing up a new AWS Organizations OU for digital services. Security wants threat detection and a consolidated security findings view before any workload account goes live. What should be enabled in the baseline?
• Municipal policy requires critical OS and package patches on EC2 fleets within 30 days. Which approach best operationalizes that standard for a new solution?
• A new citizen mobile backend-for-frontend terminates users at CloudFront, then reaches an ALB and private origins. Which encryption-in-transit design should architects mandate?
• A new utility account login page sees bursts of credential-stuffing attempts from many IPs. Which application-layer control best blunts that pattern without redesigning the whole identity stack overnight?
• Developers building a new microservice for licensing renewals proposed baking long-term IAM access keys into the container image. What credential hygiene should the architecture require instead?
• A PCI-adjacent payment helper subnet for a city cashiering integration must not freely reach the internet. Which network security design best meets sensitive-tier egress requirements?
• A new analytics data lake bucket unexpectedly may receive resident PII from upstream jobs. Which managed security service is most appropriate to discover sensitive data landing in the lake?
• A courts e-filing stack is approaching go-live. Leadership wants a managed security posture checklist—such as AWS Foundational Security Best Practices—before traffic is allowed. How should Security Hub be used?
• Public HTTPS endpoints for a new municipal portal must use centrally issued certificates with automatic renewal. Setting aside client certificate-pinning debates, what should architects mandate?
• A 311 service database must stay highly available inside a single Region with automated failover if the primary instance fails. Which data-store pattern best meets that HA requirement?
• Snow-emergency service requests can spike suddenly against a city's intake API. Workers need time to process each request without dropping intake during the surge. Which decoupling pattern best fits?
• When a boil-water advisory is declared, multiple municipal systems (SMS gateway, web banner service, utility IVR, and partner APIs) must be notified without each system calling the others directly. Which integration pattern best provides reliable fan-out?
• A county planning office needs a multi-step building-permit workflow that calls inspection, fee, and zoning services in order, retries transient failures, and runs compensating steps if a later stage fails. Which approach best meets reliability and orchestration needs?
• A city clerk’s office runs a document OCR fleet on EC2 that backs up during quiet weeks but must expand when a mail-in form season fills an SQS queue. How should Auto Scaling be designed for reliability?
• A municipality must keep irreplaceable ordinance PDFs durable and available even if an entire AWS Region becomes unavailable. Which storage reliability strategy best fits?
• A busy county resident portal caches session and lookup data in ElastiCache. Leadership wants the cache tier to survive node failure without dropping the whole site’s sessions. What design improves cache resilience?
• Before tax-day traffic, a city anticipates a large spike in concurrent Lambda executions for filing helpers. Architects worry reliability will fail when the account hits its concurrency quota. What should they do first?
• A regional health department publishes the same API in two Regions and wants citizens steered toward the healthier, lower-latency endpoint. Which Route 53 approach fits?
• A 311 intake fleet on Auto Scaling may terminate instances during scale-in. In-flight citizen reports must not be lost when a worker dies. Which design best prevents lost work?
• A small municipal IT team needs high availability for a permits database but lacks staff to operate mirrored MySQL on EC2. What should the architect recommend?
• A county’s HA program documents only application failover. Database failover is assumed to ‘just work’ and has never been tested. What operating practice should architects enforce?
• Vital-records systems must stay readable if the primary Region fails. The county accepts active-passive cost and wants DNS to shift traffic when the primary is unhealthy. Which design fits?
• Snow-plow routing jobs sometimes receive poison messages that crash workers and block the queue. How should the team ensure recoverability?
• An EC2 Auto Scaling group for a utility customer portal must remain available if one Availability Zone fails. What capacity placement practice should architects apply?
• A tourism bureau serves static park maps globally and also exposes a latency-sensitive API that benefits from static anycast entry IPs. How should edge and global performance services be applied?
• Field sensors for a water utility emit high-scale device telemetry with simple key-based access patterns. Architects considered forcing everything into relational RDS. What is the better database choice?
• A property-assessment catalog is read-heavy for public browsing while writes remain modest on the primary. Latency for browse traffic is too high. Which performance approach fits?
• County IT runs overnight batch GIS rendering and daytime in-memory analytics on citizen datasets. How should EC2 instance families be chosen for performance?
• Public-works engineers need concurrent shared access to CAD drawings from multiple Linux compute nodes with file-lock semantics. Objects in a bucket alone have caused collaboration pain. Which storage choice best matches the access pattern?
• Court e-filing feels underpowered at peak while sandbox accounts sit overbuilt all month. What rightsizing strategy should architects adopt?
• During large mail-in form seasons, OCR processing demand spikes independently of steady citizen web traffic. How should the architecture scale?
• Citizen check-in latency spikes while overall DynamoDB table metrics look only moderately busy. How should performance monitoring help?
• A state open-data portal expects large concurrent downloads of GIS packages from distant clients. Which approach best supports large-scale access patterns?
• A grants-management tool sees long idle periods and occasional query bursts. Another reporting workload runs steady queries all day. How should Aurora capacity models be matched?
• Flood-modeling jobs are tightly coupled HPC-style tasks where inter-node latency dominates runtime. What placement strategy should the architect use?
• Sensor uploads arrive in unpredictable bursts that overwhelm downstream analytics if sent inline. How should architects protect throughput and avoid drops?
• A city is designing a new mobile 311 API. Engineers are debating services before agreeing how success will be measured. What methodology should lead the design?
• A county document-management database on Amazon EC2 needs sustained IOPS and throughput for peak scanning days without overpaying for idle capacity overnight. Which block-storage design best meets performance and cost goals?
• A city is designing compute for a always-on citizen portal baseline plus a fault-tolerant batch that transcodes public meeting videos. Which purchasing mix best aligns cost with workload behavior?
• Council meeting recordings land in Amazon S3, stay warm for weeks of citizen review, then are rarely opened. Which storage design best reduces long-term cost while preserving retrieval when needed?
• Architects modeling a new permitting stack find chatty application tiers talking constantly to a database and several AWS APIs. Which design choice most directly reduces data-transfer and NAT charges?
• A municipality compares self-managed MySQL on EC2 with Amazon Aurora MySQL-Compatible for a new case-management database. Staff already work overtime on patching and failover drills. Which TCO framing is most appropriate?
• A quiet departmental intranet launches on oversized EC2 and RDS classes “just in case.” Which cost practice should architects bake into the new-solution design?
• Before approving a new multi-account citizen-services architecture, council asks for an options memo with credible cost ranges. Which approach best supports that design decision?
• A new organizational unit will host several greenfield apps. Finance wants expenditure awareness before go-live, not after a surprise bill. What should architects implement?
• A city’s open-data portal serves popular CSV and GeoJSON files from an S3 origin to thousands of citizens. Origin egress cost is rising. Which design improves performance and reduces transfer cost?
• A parks-and-recreation booking app’s RTO can be met with multi-AZ in one Region. Stakeholders propose active-active in three Regions “for prestige.” What should the cost-aware architect recommend?
• Linux-based municipal microservices are being sized for a new ECS/EKS deployment. Performance tests pass on arm64 builds. Which compute choice best balances cost and performance?
• A greenfield VPC design places many private subnets across AZs, each expected to reach AWS APIs and limited internet destinations. NAT Gateway spend projections are high. What networking cost control should architects prioritize?
• A city’s architecture review board gates new solutions before launch. Which cost practice should be part of that review?
• Departments will fund their own apps in a shared landing zone. Leadership wants showback from day one of each new solution. What must architects implement at launch?
• A weekend-only batch fleet renders seasonal flood maps and sits idle most weekdays. The steady GIS API tier runs continuously. How should commitment purchases be applied?