AWS Solutions Architect Professional SAP-C02 Practice Exam 4

A global enterprise is redesigning its network architecture across 50 AWS accounts. They require transitive routing between all VPCs and three on-premises data centers. The solution must support up to 10 Gbps of encrypted traffic per data center, minimize operational overhead, and ensure that traffic between VPCs in the same region does not traverse the internet. Which architecture meets these requirements MOST cost-effectively?

A financial services company uses AWS Organizations to manage 100+ accounts. The security team mandates that no Amazon S3 buckets can be made public, and all EBS volumes must be encrypted. Developers must still be able to create resources freely within these constraints. Which combination of actions should the Solutions Architect take to enforce these requirements with the LEAST operational overhead? (Select TWO)

An e-commerce company requires a multi-region active-active architecture for its critical order processing system. The database layer uses Amazon Aurora PostgreSQL. The application must tolerate a complete region failure with an RPO of less than 1 second and an RTO of less than 1 minute. How should the architect design the database layer?

A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that all VPC flow logs across all member accounts are centralized into a single Amazon S3 bucket in a dedicated Log Archive account. The solution must prevent member account administrators from modifying or deleting the flow logs. What is the MOST operationally efficient solution?

An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback model where each business unit (BU) pays for its own AWS usage. However, some resources like Transit Gateway and central databases are shared. How can the architect provide accurate cost visibility and chargeback capabilities?