Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 101:

  A company needs to use AWS resources to expand capacity for a website hosted in an on-premises data center. The AWS resources will include load balancers, Auto Scaling, and Amazon EC2 instances that will access an on-premises database. Network connectivity has been established, but no traffic is going to the AWS environment.

  How should Amazon Route 53 be configured to distribute load to the AWS environment? (Select TWO.)

  A. Set up a weighted routing policy, distributing the workload between the load balancer and the on-premises environment.
  B. Set up an A record to point the DNS name to the IP address of the load balancer.
  C. Create multiple A records for the EC2 instances.
  D. Set up a geolocation routing policy to distribute the workload between the load balancer and the on-premises environment.
  E. Set up a routing policy for failover using the on-premises environment as primary and the load balancer as secondary.
  A. Set up a weighted routing policy, distributing the workload between the load balancer and the on-premises environment.
  B. Set up an A record to point the DNS name to the IP address of the load balancer.

• Question 102:

  What is the minimum charge for the data transferred between Amazon RDS and Amazon EC2 Instances in the same Availability Zone?

  A. USD 0.10 per GB
  B. No charge. It is free.
  C. USD 0.02 per GB
  D. USD 0.01 per GB
  B. No charge. It is free.

• Question 103:

  A web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. Every night, the Auto Scaling group doubles in size. Traffic

  analysis shows that users in a particular region are requesting the same static content stored locally on the EC2 instances.

  How can a Solutions Architect reduces the need to scale and improve application performance for the users?

  A. Re-deploy the application in a new VPC that is closer to the users making the requests.
  B. Create an Amazon CloudFront distribution for the site and redirect user traffic to the distribution.
  C. Store the contents on Amazon EFS instead of the EC2 root volume.
  D. Implement Amazon Redshift to create a repository of the content closer to the users.
  B. Create an Amazon CloudFront distribution for the site and redirect user traffic to the distribution.

• Question 104:

  A news organization plans to migrate their 20 TB video archive to AWS. The files are rarely accessed, but when they are, a request is made in advance and a 3 to 5-hour retrieval time frame is acceptable. However, when there is a breaking

  news story, the editors require access to archived footage within minutes.

  Which storage solution meets the needs of this organization while providing the LOWEST cost of storage?

  A. Store the archive in Amazon S3 Reduced Redundancy Storage.
  B. Store the archive in Amazon Glacier and use standard retrieval for all content.
  C. Store the archive in Amazon Glacier and pay the additional charge for expedited retrieval when needed.
  D. Store the archive in Amazon S3 with a lifecycle policy to move this to S3 Infrequent Access after 30 days.
  C. Store the archive in Amazon Glacier and pay the additional charge for expedited retrieval when needed.

• Question 105:

  A Solution Architect is designing a two-tier application for maximum security, with a web tier running on EC2 instances and the data stored in an RDS DB instance. The web tier should accept user access only through HTTPS connections (port 443) from the Internet, and the data must be encrypted in transit to and from the database.

  What combination of steps will MOST securely meet the stated requirements? (Choose two.)

  A. Create a security group for the web tier instances that allows inbound traffic only over port 443.
  B. Enforce Transparent Data Encryption (TDE) on the RDS database.
  C. Create a network ACL that allows inbound traffic only over port 443.
  D. Configure the web servers to communicate with RDS by using SSL, and issue certificates to the web tier EC2 instances.
  E. Create a customer master key in AWS KMS and apply it to encrypt the RDS instance.
  C. Create a network ACL that allows inbound traffic only over port 443.
  D. Configure the web servers to communicate with RDS by using SSL, and issue certificates to the web tier EC2 instances.

• Question 106:

  A company is launching a new static website on Amazon S3 and Amazon CloudFront. The company wants to ensure that all web requests go through only CloudFront. How can a Solutions Architect meet this requirement?

  A. Configure the S3 bucket policy to allow only CloudFront IP addresses to read objects.
  B. Create IAM users in a group that has read access to the S3 bucket. Configure CloudFront to pass credentials to the S3 bucket.
  C. Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.
  D. Convert the S3 bucket to an EC2 instance, then give CloudFront access to the instance by using security groups.
  C. Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.

• Question 107:

  A media company must store 10 TB of audio recordings. Retrieval happens infrequently and requestors agree on an 8-hour turnaround time. What is the MOST cost-effective solution to store the files?

  A. Amazon S3 Standard ?Infrequent Access (Standard ?IA)
  B. EBS Throughput Optimized HDD (st1)
  C. EBS Cold HDD (sc1)
  D. Amazon Glacier
  D. Amazon Glacier

• Question 108:

  A company has an application that uses Amazon CloudFront for content that is hosted on an Amazon S3 bucket. After an unexpected refresh, the users are still seeing old content. Which step should the Solutions Architect take to ensure that new content is displayed?

  A. Perform a cache refresh on the CloudFront distribution that is serving the content.
  B. Perform an invalidation on the CloudFront distribution that is serving the content.
  C. Create a new cache behavior path with the updated content.
  D. Change the TTL value for removing the old objects.
  D. Change the TTL value for removing the old objects.

• Question 109:

  A Solutions Architect is designing a solution that can monitor memory and disk space utilization of all Amazon EC2 instances running Amazon Linux and Windows. Which solution meets this requirement?

  A. Default Amazon CloudWatch metrics.
  B. Custom Amazon CloudWatch metrics.
  C. Amazon Inspector resource monitoring.
  D. Default monitoring of Amazon EC2 instances.
  B. Custom Amazon CloudWatch metrics.

• Question 110:

  You are responsible for a legacy web application whose server environment is approaching end of life You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations: The VM's single 10GB VMDK is almost full Me virtual network interface still uses the 10Mbps driver, which leaves your 100Mbps WAN connection completely underutilized It is currently running on a highly customized. Windows VM within a VMware environment: You do not have me installation media

  This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements?

  A. Use the EC2 VM Import Connector for vCenter to import the VM into EC2.
  B. Use Import/Export to import the VM as an ESS snapshot and attach to EC2.
  C. Use S3 to create a backup of the VM and restore the data into EC2.
  D. Use me ec2-bundle-instance API to Import an Image of the VM into EC2
  A. Use the EC2 VM Import Connector for vCenter to import the VM into EC2.