Saa-C02 True
Saa-C02 True
Amazon-Web-Services
Exam Questions SAA-C02
AWS Certified Solutions Architect - Associate (SAA-C02)
NEW QUESTION 1
A solutions architect is designing a system to analyze the performance of financial markets while the markets are closed The system will run a series of compute-
intensive jobs for 4 hours every night The time to complete the compute jobs is expected to remain constant, and jobs cannot be interrupted once started Once
completed, the system is expected to run for a minimum of 1 year
Which type of Amazon EC2 instances should be used to reduce the cost of the system?
A. Spot Instances
B. On-Demand Instances
C. Standard Reserved Instances
D. Scheduled Reserved Instances
Answer: D
NEW QUESTION 2
A company has deployed an API in a VPC behind an internet-facing Application Load Balancer (ALB) An application that consumes the API as a client is deployed
in a second account in private subnets behind a NAT gateway. When requests to the client application increase, the NAT gateway costs are higher than expected.
A solutions architect has configured the ALB to be internal.
Which combination of architectural changes will reduce the NAT gateway costs'? (Select TWO )
Answer: DE
NEW QUESTION 3
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history,
the company anticipates a spike in traffic during a holiday each year A solutions architect must design a strategy to ensure that the Auto Scaling group proactively
increases capacity to minimize any performance impact on application users
Which solution will meet these requirements?
A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%
B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand
C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period
D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are auto scaling EC2_INSTANCE_LAUNCH events
Answer: B
NEW QUESTION 4
A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The instances run in an Amazon EC2 Auto Scaling group
across multiple Availability Zones On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch
executes This causes the CPU utilization of the EC2 instances to immediately peak to 100%. which disrupts the application
What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?
Answer: C
NEW QUESTION 5
A solutions architect is designing a two-tier web application The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets The
database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet Security is a high priority for the company
How should security groups be configured in this situation? (Select TWO )
A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0 0 0 0/0
B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0 0 0 0/0
C. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier
D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier
E. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier
Answer: AC
NEW QUESTION 6
A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The website has a mix of dynamic and static content Users
around the globe are reporting that the website is slow
Which set of actions will improve website performance for users worldwide?
A. Create an Amazon CloudFront distribution and configure the ALB as an origin Then update the Amazon Route 53 record to point to the CloudFront distribution
B. Create a latency-based Amazon Route 53 record for the ALB Then launch new EC2 instances with larger instance sizes and register the instances with the ALB
C. Launch ne
D. EC2 instances hosting the same web application in different Regions closer to the users.Then register the instances with the same ALB using cross-Region
VPC peering
E. Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances Then update an Amazon Route 53 record
to point to the S3 buckets
Answer: A
NEW QUESTION 7
A company is running an ecommerce application on Amazon EC2 The application consists of a stateless web tier that requires a minimum of 10 instances, and a
peak of 250 instances to support the application's usage The application requires 50 instances 80% of the time
Which solution should be used to minimize costs?
Answer: D
NEW QUESTION 8
A company is migrating from an on-premises infrastructure to the AWS Cloud One of the company's applications stores files on a Windows file server farm that
uses Distributed File System Replication (DFSR) to keep data in sync A solutions architect needs to replace the file server farm
Which service should the solutions architect use?
A. Amazon EFS
B. Amazon FSx
C. Amazon S3
D. AWS Storage Gateway
Answer: B
NEW QUESTION 9
A recently acquired company is required to buikl its own infrastructure on AWS and migrate multiple applications to the cloud within a month Each application has
approximately 50 TB of data to be transferred After the migration is complete this company and its parent company will both require secure network connectivity
with consistent throughput from their data centers to the applications A solutions architect must ensure one-time data migration and ongoing network connectivity
Which solution will meet these requirements''
A. AWS Direct Connect for both the initial transfer and ongoing connectivity
B. AWS Site-to-Site VPN for both the initial transfer and ongoing connectivity
C. AWS Snowball for the initial transfer and AWS Direct Connect for ongoing connectivity
D. AWS Snowball for the initial transfer and AWS Site-to-Site VPN for ongoing connectivity
Answer: C
NEW QUESTION 10
A company is planning to use Amazon S3 lo store images uploaded by its users The images must be encrypted at rest in Amazon S3 The company does not want
to spend time managing and rotating the keys, but it does want to control who can access those keys
What should a solutions architect use to accomplish this?
Answer: C
NEW QUESTION 10
A company serves content to its subscribers across the world using an application running on AWS The application has several Amazon EC2 instances in a
private subnet behind an Application Load Balancer (ALB) Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access
for certain countries
Which action will meet these requirements?
A. Modify the ALB security group to deny incoming traffic from blocked countries
B. Modify the security group for EC2 instances to deny incoming traffic from blocked countries
C. Use Amazon CloudFront to serve the application and deny access to blocked countries
D. Use ALB listener rules to return access denied responses to incoming traffic from blocked countries
Answer: C
NEW QUESTION 15
A security team wants to limit access to specific services or actions in all of the team's AWS accounts. All accounts belong to a large organization in AWS
Organizations The solution must be scalable and there must be a single point where permissions can be maintained.
What should a solutions architect do to accomplish this?
C. Create cross-account roles in each account to deny access to the services or actions.
D. Create a service control policy in the root organizational unit to deny access to the services or actions
Answer: D
NEW QUESTION 20
A company must generate sales reports at the beginning of every month. The reporting process launches 20 Amazon EC2 instances on the first of the month. The
process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?
A. Reserved Instances
B. Spot Block Instances
C. On-Demand Instances
D. Scheduled Reserved Instances D18912E1457D5D1DDCBD40AB3BF70D5D
Answer: C
NEW QUESTION 23
A company's legacy application is currently relying on a single-instance Amazon RDS MySQL database without encryption Due to new compliance requirements,
all existing and new data in this database must be encrypted
How should this be accomplished?
A. Create an Amazon S3 bucket with server-side encryption enabled Move all the data to Amazon S3 Delete the RDS instance
B. Enable RDS Multi-AZ mode with encryption at rest enabled Perform a failover to the standby instance to delete the original instance
C. Take a snapshot of the RDS instance Create an encrypted copy of the snapshot Restore the RDS instance from the encrypted snapshot
D. Create an RDS read replica with encryption at rest enabled Promote the read replica to master and switch the application over to the new master Delete the old
RDS instance.
Answer: C
NEW QUESTION 26
A solutions architect is designing a solution to access a catalog of images and provide users with the ability to submit requests to customize images Image
customization parameters will be in any request sent to an AWS API Gateway API The customized image will be generated on demand, and users will receive a
link they can click to view or download their customized image The solution must be highly available for viewing and customizing images
What is the MOST cost-effective solution to meet these requirements?
A. Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original and manipulated images in Amazon S3
Configure an Elastic Load Balancer in front of the EC2 instances
B. Use AWS Lambda to manipulate the original image to the requested customization Store the original and manipulated images in Amazon S3 Configure an
Amazon CloudFront distribution with the S3 bucket as the origin
C. Use AWS Lambda to manipulate the original image to the requested customization Store the original images in Amazon S3 and the manipulated images in
Amazon DynamoDB Configure an Elastic Load Balancer in front of the Amazon EC2 instances
D. Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original images in Amazon S3 and the manipulated
images in Amazon DynamoDB Configure an Amazon CloudFront distribution with the S3 bucket as the origin
Answer: B
NEW QUESTION 31
A solutions architect has created a new AWS account and must secure AWS account root user access Which combination of actions will accomplish this? (Select
TWO.)
Answer: AB
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html
NEW QUESTION 35
A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an
S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access
Which of the following would be the LEAST complicated implementation?
A. Use an Amazon CloudFront distribution with an origin access identity (OAI) Configure the distribution with an Amazon S3 origin to provide access to the file
through signed URL’s Design a Lambda function to remove data that is older than 14 days.
B. Use an S3 bucket and provide direct access to the tile Design the application to track purchases in a DynamoDH tableConfigure a Lambda function to remove
data that is older than 14 days based on a query to Amazon DynamoDB
C. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs
Design the application to sot an expiration of 14 days for the URL
D. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs
Design the application to set an expiration of 60 minutes for the URL and recreate the URL as necessary
Answer: C
NEW QUESTION 37
A company has a legacy application that processes data in two parts The second part of the process takes longer than the first, so the company has decided to
rewrite the application as two microservices running on Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?
Answer: C
NEW QUESTION 39
A solutions architect is designing the cloud architecture for a new application being deployed on AWS The process should run in parallel while adding and
removing application nodes as needed based on the number of jobs to be processed The processor application is stateless The solutions architect must ensure
that the application is loosely coupled and the job items are durably stored
Which design should the solutions architect use?
A. Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application
Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to
add and remove nodes based on CPU usage
B. Create an Amazon SQS queue to hold the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application
Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to
add and remove nodes based on network usage
C. Create an Amazon SQS queue to hold the jobs that needs to be processed Create an Amazon Machine Image (AMI) that consists of the processor application
Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and
remove nodes based on the number of items in the SQS queue
D. Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application
Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and
remove nodes based on the number of messages published to the SNS topic.
Answer: C
NEW QUESTION 40
A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis An application on an Amazon EC2 instance needs permission to
efficiently process the CSV data stored in the S3 bucket.
Which action will MOST securely grant the EC2 instance access to the S3 bucket?
Answer: C
NEW QUESTION 41
A company's application is running on Amazon EC2 instances m a single Region in the event of a disaster a solutions architect needs to ensure that the resources
can also be deployed to a second Region
Which combination of actions should the solutions architect take to accomplish this-? (Select TWO)
Answer: BD
NEW QUESTION 44
A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application
users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and
download latency and maximize performance.
What should a solutions architect do to accomplish this?
Answer: C
NEW QUESTION 46
A company captures clickstream data from multiple websites and analyzes it using batch processing. The data is loaded nightly into Amazon Redshift and is
consumed by business analysts. The company wants to move towards near-real-time data processing for timely insights. The solution should process the
streaming data with minimal effort and operational overhead.
Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)
A. Amazon EC2
B. AWS Lambda
C. Amazon Kinesis Data Streams
D. Amazon Kinesis Data Firehose
E. Amazon Kinesis Data Analytics
Answer: AD
NEW QUESTION 50
A web application is deployed in the AWS Cloud It consists of a two-tier architecture that includes a web layer and a database layer The web server is vulnerable
to cross-site scripting (XSS) attacks
What should a solutions architect do to remediate the vulnerability?
A. Create a Classic Load Balancer Put the web layer behind the load balancer and enable AWS WAF
B. Create a Network Load Balancer Put the web layer behind the load balancer and enable AWS WAF
C. Create an Application Load Balancer Put the web layer behind the load balancer and enable AWS WAF
D. Create an Application Load Balancer Put the web layer behind the load balancer and use AWS Shield Standard
Answer: C
NEW QUESTION 55
A company has a two-tier application architecture that runs in public and private subnets Amazon EC2 instances running the web application are in the public
subnet and a database runs on the private subnet The web application instances and the database are running in a single Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this architecture? (Select TWO.)
A. Create new public and private subnets in the same AZ for high availability
B. Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
C. Add the existing web application instances to an Auto Scaling group behind an Application Load Balancer
D. Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one AZ
E. Create new public and private subnets in the same VPC each in a new AZ Migrate the database to an Amazon RDS multi-AZ deployment
Answer: BE
NEW QUESTION 59
A solutions architect is designing a new service behind Amazon API Gateway The request patterns for the service will be unpredictable and can change suddenly
from 0 requests to over 500 per second The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable
future growth Data can be queried using simple key-value requests
Which combination of AWS services would meet these requirements'? (Select TWO )
A. AWS Fargate
B. AWS Lambda
C. Amazon DynamoDB
D. Amazon EC2 Auto Scaling
E. MySQL-compatible Amazon Aurora
Answer: BC
NEW QUESTION 63
A company hosts an application on multiple Amazon EC2 instances The application processes messages from an Amazon SQS queue writes to an Amazon RDS
table and deletes the message from the queue Occasional duplicate records are found in the RDS table The SQS queue does not contain any duplicate messages
What should a solutions archived do to ensure messages are being processed once only?
Answer: D
NEW QUESTION 64
A company is migrating a three-tier application to AWS. The application requires a MySQL database. In the past, the application users reported poor application
performance when creating new entries. These
performance issues were caused by users generating different real-time reports from the application duringworking hours.
Which solution will improve the performance of the application when it is moved to AWS?
A. Import the data into an Amazon DynamoDB table with provisioned capacit
B. Refactor the application to use DynamoDB for reports.
C. Create the database on a compute optimized Amazon EC2 instanc
D. Ensure compute resources exceed the on-premises database.
E. Create an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replica
F. Configure the application reader endpoint for reports.
G. Create an Amazon Aurora MySQL Multi-AZ DB cluste
H. Configure the application to use the backup instance of the cluster as an endpoint for the reports.
Answer: B
NEW QUESTION 68
A solutions architect is deploying a distributed database on multiple Amazon EC2 instances The database stores all data on multiple instances so it can withstand
the loss of an instance The database requires block storage with latency and throughput to support several million transactions per second per server
Which storage solution should the solutions architect use?
A. Amazon EBS
B. Amazon EC2 instance store
C. Amazon EFS
D. Amazon S3
Answer: B
NEW QUESTION 71
A company currently operates a web application backed by an Amazon RDS MySQL database It has automated backups that are run daily and are not encrypted
A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed The company will make at least one encrypted backup
before destroying the old backups
What should be done to enable encryption for future backups''
A. Enable default encryption for the Amazon S3 bucket where backups are stored
B. Modify the backup section of the database configuration to toggle the Enable encryption check box
C. Create a snapshot of the database Copy it to an encrypted snapshot Restore the database from the encrypted snapshot
D. Enable an encrypted read replica on RDS for MySQL Promote the encrypted read replica to primary Remove the original database instance
Answer: C
NEW QUESTION 75
A solutions architect is implementing a document review application using an Amazon S3 bucket for storage
The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download,
modify, and upload documents
Which combination of actions should be taken to meet these requirements'? (Select TWO )
Answer: BD
NEW QUESTION 79
A company is hosting a web application on AWS using a single Amazon EC2 instance that stores
user-uploaded documents in an Amazon EBS volume For better scalability and availability the company duplicated the architecture and created a second EC2
instance and EBS volume in another Availability Zone: placing both behind an Application Load Balancer After completing this change users reported that each
time they refreshed the website they could see one subset of their documents or the other but never all of the documents at the same time
What should a solutions architect propose to ensure users see all of their documents at once''
A. Copy the data so both EBS volumes contain all the documents
B. Configure the Application Load Balancer to direct a user to the server with the documents
C. Copy the data from both EBS volumes to Amazon EFS Modify the application to save new documents to Amazon EPS
D. Configure the Application Load Balancer to send the request to both servers Return each document from the correct server
Answer: C
NEW QUESTION 83
A solutions architect is designing an application for a two-step order process The first step is synchronous and must return to the user with little latency The second
step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are received
How should the solutions architect integrate these components?
Answer: C
NEW QUESTION 88
A company allows its developers to attach existing 1AM policies to existing 1AM roles to enable (aster experimentation and agility However the security operations
team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies
How should a solutions architect address this issue?
A. Create an Amazon SNS topic to send an alert every time a developer creates a new policy
B. Use service control policies to disable IAM activity across all accounts in the organizational unit
C. Prevent the developers from attaching any policies and assign all 1AM duties to the security operations team
D. Set an IAM permissions boundary on the developer 1AM role that explicitly denies attaching the administrator policy
Answer: D
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
NEW QUESTION 91
......
* SAA-C02 Most Realistic Questions that Guarantee you a Pass on Your FirstTry
* SAA-C02 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year