nerdexam
Amazon

SAP-C02 · Question #762

A company runs an ecommerce web application on AWS. The web application is hosted as a static website on Amazon S3 with Amazon CloudFront for content delivery. An Amazon API Gateway API invokes AWS…

The correct answer is D. Use Lambda functions with provisioned concurrency for compute during peak periods. Use RDS. AWS Shield Advanced is not required; AWS WAF can be used to protect against common web exploits such as SQL injection and cross-site scripting (XSS) attacks.

Submitted by luis.pe· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A company runs an ecommerce web application on AWS. The web application is hosted as a static website on Amazon S3 with Amazon CloudFront for content delivery. An Amazon API Gateway API invokes AWS Lambda functions to handle user requests and order processing for the web application The Lambda functions store data in an Amazon ROS for MySQL DB cluster that uses On-Demand instances. The DB cluster usage has been consistent in the past 12 months. Recently, the website has experienced SQL injection and web exploit attempts. Customers also report that order processing time has increased during periods of peak usage. During these periods, the Lambda functions often have cold starts. As the company grows, the company needs to ensure scalability and low-latency access during traffic peaks. The company also must optimize the database costs and add protection against the SQL injection and web exploit attempts. Which solution will meet these requirements?

Options

  • AConfigure the Lambda functions to have an increased timeout value during peak periods. Use
  • BIncrease the memory of the Lambda functions, Transition to Amazon Redshift for the database.
  • CUse Lambda functions with provisioned concurrency for compute during peak periods, Transition
  • DUse Lambda functions with provisioned concurrency for compute during peak periods. Use RDS

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    19% (8)
  • C
    9% (4)
  • D
    67% (29)

Explanation

AWS Shield Advanced is not required; AWS WAF can be used to protect against common web exploits such as SQL injection and cross-site scripting (XSS) attacks.

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice