AWS Certified Solutions Architect Professional SAP-C02 Practice Question
An investment-banking firm is re-architecting its proprietary trade-execution platform from on-premises VMs to AWS. The Java microservice is stateless and scales horizontally from 10 to more than 500 vCPUs during U.S. trading hours. Technical requirements for the new compute layer are:
Sub-millisecond node-to-node network latency inside the Availability Zone.
Isolation of the service that handles client-side TLS private keys so that even root on the EC2 host cannot read the keys.
A phased migration to AWS Graviton-based instances to reduce cost while still supporting the current x86_64 build.
Automatic horizontal scaling and zero-downtime rolling updates.
Which architecture meets all of the requirements with the LEAST operational overhead?
Create an Amazon EC2 Auto Scaling group that uses a mixed-instances policy with separate launch templates for M6i (x86_64) and M6g (Arm64) instances. Enable Nitro Enclaves in each template, place the group in a cluster placement group, configure weighted capacity and a capacity-optimized allocation strategy, and use Instance Refresh for rolling updates.
Rewrite the application as AWS Lambda functions invoked through Amazon API Gateway. Use AWS KMS customer-managed keys for signing and configure Provisioned Concurrency to meet peak load.
Launch the microservice on EC2 Dedicated Hosts running only M6i instances across two Availability Zones. Use an AWS CloudHSM cluster for key storage and distribute traffic with an Application Load Balancer.
Containerize the service and deploy it on AWS Fargate with Amazon ECS. Store the TLS private keys in AWS Secrets Manager and use Service Auto Scaling to add or remove tasks during trading hours.
An Amazon EC2 Auto Scaling group that uses a mixed-instances policy meets every stated need:
Low-latency networking - Launching the ASG in a cluster placement group keeps instances in the same AZ rack segment, achieving the high-bandwidth, sub-millisecond latency required.
Key isolation - Enabling Nitro Enclaves in the launch template creates an isolated execution environment that even root on the parent instance cannot access and that integrates natively with AWS KMS. Nitro Enclaves is supported on Intel, AMD, and Graviton instance families.
Graviton adoption with x86 compatibility - A mixed-instances ASG can reference multiple launch templates (one Arm64 AMI for M6g, one x86_64 AMI for M6i) and use instance weights so that capacity can be satisfied by either architecture, allowing a gradual, risk-free migration.
Horizontal scaling & rolling updates - Auto Scaling handles scale-out/scale-in based on metrics, and Instance Refresh (or rolling updates in CloudFormation) provides zero-downtime deployments with minimal management.
The other options fail at least one requirement:
ECS Fargate cannot run Nitro Enclaves and cannot guarantee sub-millisecond latency between tasks, so it does not satisfy the key-isolation or latency needs.
Dedicated Hosts with CloudHSM isolate keys but add significant cost and operational overhead, and this option fails to address the requirement for a phased migration to Graviton.
Lambda-based rewrite removes control over intra-function network latency, is not an ideal architectural fit for this type of sustained compute workload, and offers no enclave-like isolation for the key-handling service.
Therefore, the mixed-instances EC2 Auto Scaling solution is the only one that covers every constraint with the lowest operational burden.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a cluster placement group in AWS?
Open an interactive chat with Bash
What are Nitro Enclaves, and how do they ensure key isolation?
Open an interactive chat with Bash
How does a mixed-instances policy improve migration to Graviton in Auto Scaling groups?
Open an interactive chat with Bash
AWS Certified Solutions Architect Professional SAP-C02
Accelerate Workload Migration and Modernization
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access