SAP-C02 practice question 6 of 35

A company needs to migrate an on-premises SFTP site to AWS. The SFTP site currently runs on a Linux VM. Uploaded files are made available to…

Domain Design Solutions for Organizational Complexity

A company needs to migrate an on-premises SFTP site to AWS. The SFTP site currently runs on a Linux VM. Uploaded files are made available to downstream applications through an NFS share. As part of the migration to AWS, a solutions architect must implement high availability. The solution must provide external vendors with a set of static public IP addresses that the vendors can allow. The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC. Which solution will meet these requirements with the least operational overhead?

Answer options

A: Create an AWS Transfer Family server, configure an internet-facing VPC endpoint for the Transfer Family server, specify an Elastic IP address for each subnet, configure the Transfer Family server to pace files into an Amazon Elastic Files System (Amazon EFS) file system that is deployed across multiple Availability Zones Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead. Correct answer

B: Create an AWS Transfer Family server. Configure a publicly accessible endpoint for the Transfer Family server. Configure the Transfer Family server to place files into an Amazon Elastic Files System [Amazon EFS} the system that is deployed across multiple Availability Zones. Modify the configuration on the downstream applications that access the existing NFS share to mount the its endpoint instead.

C: Use AWS Application Migration service to migrate the existing Linux VM to an Amazon EC2 instance. Assign an Elastic IP address to the EC2 instance. Mount an Amazon Elastic Fie system (Amazon EFS) the system to the EC2 instance. Configure the SFTP server to place files in. the EFSfile system. Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead.

D: Use AWS Application Migration Service to migrate the existing Linux VM to an AWS Transfer Family server. Configure a publicly accessible endpoint for the Transfer Family server. Configure the Transfer Family sever to place files into an Amazon FSx for Luster the system that is deployed across multiple Availability Zones. Modify the configuration on the downstream applications that access the existing NFS share to mount the FSx for Luster endpoint instead.

Correct Answer:

A. Create an AWS Transfer Family server, configure an internet-facing VPC endpoint for the Transfer Family server, specify an Elastic IP address for each subnet, configure the Transfer Family server to pace files into an Amazon Elastic Files System (Amazon EFS) file system that is deployed across multiple Availability Zones Modify the configuration on the downstream applications that access the existing NFS share to mount the EFS endpoint instead.

Explanation

This solution meets all requirements with the least operational overhead. AWS Transfer Family is a fully managed, highly available service for SFTP. Configuring an internet-facing VPC endpoint allows you to assign a static Elastic IP address in each Availability Zone, fulfilling the vendor whitelisting requirement. Using Amazon EFS as the storage backend provides a highly available, multi-AZ, NFS-compatible file system that directly replaces the on-premises NFS share for downstream applications. This combination of managed services (Transfer Family, EFS, VPC Endpoints) minimizes the need for server management, patching, and manual high-availability configuration, thus ensuring the lowest operational overhead.

Why Incorrect

B. The default "publicly accessible" endpoint for AWS Transfer Family uses a rotating pool of IP addresses from the AWS fleet and does not support assigning your own static Elastic IPs.
C. Migrating to a single Amazon EC2 instance is not a highly available solution. It also incurs significant operational overhead for managing the OS, SFTP software, and security patching.
D. AWS Application Migration Service (MGN) migrates servers to Amazon EC2, not to a managed service like AWS Transfer Family. This option describes a technically infeasible migration path.

References

1. AWS Transfer Family Documentation - Endpoint types: "For an internet-facing endpoint in your VPC

you can associate an Elastic IP address with your endpoint. This allows you to provide a fixed IP address for your end users."

Source: AWS Transfer Family User Guide

"Create an internet-facing endpoint in a virtual private cloud".

2. AWS Transfer Family Documentation - EFS Integration: "You can use AWS Transfer Family to transfer files into and out of your Amazon EFS file systems... Amazon EFS provides a simple

scalable

fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources."

Source: AWS Transfer Family User Guide

"Using Amazon EFS storage".

3. AWS Documentation - High Availability for Transfer Family: "AWS Transfer Family is a highly available and scalable service... The service is designed to operate across multiple Availability Zones (AZs) in an AWS Region."

Source: AWS Transfer Family User Guide

"Resilience in AWS Transfer Family".

4. AWS Application Migration Service Documentation: "AWS Application Migration Service (AWS MGN) is the primary migration service recommended for lift-and-shift migrations to AWS. Application Migration Service simplifies and expedites your migration to AWS by automatically converting your source servers from physical

virtual

or cloud infrastructure to run natively on AWS." (Note: "run natively on AWS" refers to EC2 instances).

Source: AWS Application Migration Service User Guide

"What is AWS Application Migration Service?".

Keep practicing

Take the free SAP-C02 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test