SAP L2P 601-707 v24.021

Question 1

QUESTION 707
A solutions architect has deployed a web application that serves users across two AWS Regions
under a custom domain. The application uses Amazon Route 53 latency-based routing. The
solutions architect has associated weighted record sets with a pair of web servers in separate
Availability Zones for each Region.
The solutions architect runs a disaster recovery scenario. When all the web servers in one
Region are stopped, Route 53 does not automatically redirect users to the other Region.
Which of the following are possible root causes of this issue? (Choose two.)
A. The weight for the Region where the web servers were stopped is higher than the weight for the
other Region.
B. One of the web servers in the secondary Region did not pass its HTTP health check.
C. Latency resource record sets cannot be used in combination with weighted resource record sets.
D. The setting to evaluate target health is not turned on for the latency alias resource record set that
is associated with the domain in the Region where the web servers were stopped.
E. An HTTP health check has not been set up for one or more of the weighted resource record sets
associated with the stopped web servers.

Answer 1

D. The setting to evaluate target health is not turned on for the latency alias resource record set that
is associated with the domain in the Region where the web servers were stopped.
E. An HTTP health check has not been set up for one or more of the weighted resource record sets
associated with the stopped web servers.

Explanation:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-complex-configs.html

Question 2

QUESTION 706
A company has multiple lines of business (LOBs) that roll up to the parent company. The
company has asked its solutions architect to develop a solution with the following requirements:
- Produce a single AWS invoice for all of the AWS accounts used by its
LOBs.
- The costs for each LOB account should be broken out on the invoice.
- Provide the ability to restrict services and features in the LOB
accounts, as defined by the company’s governance policy.
- Each LOB account should be delegated full administrator permissions,
regardless of the governance policy.
Which combination of steps should the solutions architect take to meet these requirements?
(Choose two.)
A. Use AWS Organizations to create an organization in the parent account for each LOB. Then invite
each LOB account to the appropriate organization.
B. Use AWS Organizations to create a single organization in the parent account. Then, invite each
LOB’s AWS account to join the organization.
C. Implement service quotas to define the services and features that are permitted and apply the
quotas to each LOB. as appropriate.
D. Create an SCP that allows only approved services and features, then apply the policy to the LOB
accounts.
E. Enable consolidated billing in the parent account’s billing console and link the LOB accounts.

Answer 2

B. Use AWS Organizations to create a single organization in the parent account. Then, invite each
LOB’s AWS account to join the organization.
D. Create an SCP that allows only approved services and features, then apply the policy to the LOB
accounts.

Question 3

QUESTION 705
A software as a service (SaaS) company provides a media software solution to customers. The
solution is hosted on 50 VPCs across various AWS Regions and AWS accounts. One of the
VPCs is designated as a management VPC. The compute resources in the VPCs work
independently.
The company has developed a new feature that requires all 50 VPCs to be able to communicate
with each other. The new feature also requires one-way access from each customer’s VPC to the
company’s management VPC. The management VPC hosts a compute resource that validates
licenses for the media software solution.
The number of VPCs that the company will use to host the solution will continue to increase as
the solution grows.
Which combination of steps will provide the required VPC connectivity with the LEAST
operational overhead? (Choose two.)
A. Create a transit gateway. Attach all the company’s VPCs and relevant subnets to the transit
gateway.
B. Create VPC peering connections between all the company’s VPCs.
C. Create a Network Load Balancer (NLB) that points to the compute resource for license validation.
Create an AWS PrivateLink endpoint service that is available to each customer’s VPAssociate the
endpoint service with the NLB.
D. Create a VPN appliance in each customer’s VPC. Connect the company’s management VPC to
each customer’s VPC by using AWS Site-to-Site VPN.
E. Create a VPC peering connection between the company’s management VPC and each customer’s
VPC.

Answer 3

A. Create a transit gateway. Attach all the company’s VPCs and relevant subnets to the transit
gateway.
C. Create a Network Load Balancer (NLB) that points to the compute resource for license validation.
Create an AWS PrivateLink endpoint service that is available to each customer’s VPAssociate the
endpoint service with the NLB.