Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 181:

  A Solutions Architect has a multi-layer application running in Amazon VPC. The application has an ELB Classic Load Balancer as the front end in a public subnet, and an Amazon EC2-based reverse proxy that performs content-based routing to two backend Amazon EC2 instances hosted in a private subnet. The Architect sees tremendous traffic growth and is concerned that the reverse proxy and current backend set up will be insufficient. Which actions should the Architect take to achieve a cost-effective solution that ensures the application automatically scales to meet traffic demand? (Select two.)

  A. Replace the Amazon EC2 reverse proxy with an ELB internal Classic Load Balancer.
  B. Add Auto Scaling to the Amazon EC2 backend fleet.
  C. Add Auto Scaling to the Amazon EC2 reverse proxy layer.
  D. Use t2 burstable instance types for the backend fleet.
  E. Replace both the frontend and reverse proxy layers with an ELB Application Load Balancer.
  A. Replace the Amazon EC2 reverse proxy with an ELB internal Classic Load Balancer.
  B. Add Auto Scaling to the Amazon EC2 backend fleet.

• Question 182:

  A Solutions Architect is designing a solution for a dynamic website, "example.com," that is deployed in two regions: Tokyo, Japan and Sydney, Australia. The Architect wants to ensure that users located in Australia are directed to the website deployed in the Sydney region and users located in Japan are redirected to the website in the Tokyo region when they browse to "example.com".

  Which service should the Architect use to achieve this goal with the LEAST administrative effort?

  A. Amazon CloudFront with geolocation routing
  B. Amazon Route 53
  C. Application Load Balancer
  D. Network Load Balancer deployed across multiple regions
  B. Amazon Route 53

• Question 183:

  An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2 Instances.

  The customers' security policy requires that every outbound connection from these instances to any other service within the customers Virtual Private Cloud must be authenticated using a unique x 509 certificate that contains the specific

  instance-id.

  In addition, an x 509 certificates must Designed by the customer's Key management service in order to be trusted for authentication.

  Which of the following configurations will support these requirements?

  A. Configure an IAM Role that grants access to an Amazon S3 object containing a signed certificate and configure me Auto Scaling group to launch instances with this role Have the instances bootstrap get the certificate from Amazon S3 upon first boot.
  B. Embed a certificate into the Amazon Machine Image that is used by the Auto Scaling group Have the launched instances generate a certificate signature request with the instance's assigned instance- id to the Key management service for signature.
  C. Configure the Auto Scaling group to send an SNS notification of the launch of a new instance to the trusted key management service. Have the Key management service generate a signed certificate and send it directly to the newly launched instance.
  D. Configure the launched instances to generate a new certificate upon first boot Have the Key management service poll the AutoScaling group for associated instances and send new instances a certificate signature (hat contains the specific instance-id.
  A. Configure an IAM Role that grants access to an Amazon S3 object containing a signed certificate and configure me Auto Scaling group to launch instances with this role Have the instances bootstrap get the certificate from Amazon S3 upon first boot.

• Question 184:

  A company has an Amazon RDS database backing its production website. The Sales team needs to run queries against the database to track training program effectiveness. Queries against the production database cannot impact performance, and the solution must be easy to maintain.

  How can these requirements be met?

  A. Use an Amazon Redshift database. Copy the product database into Redshift and allow the team to query it.
  B. Use an Amazon RDS read replica of the production database and allow the team to query against it.
  C. Use multiple Amazon EC2 instances running replicas of the production database, placed behind a load balancer.
  D. Use an Amazon DynamoDB table to store a copy of the data.
  A. Use an Amazon Redshift database. Copy the product database into Redshift and allow the team to query it.

• Question 185:

  A gaming application is heavily dependent on caching and uses Amazon ElastiCache for Redis. The application performance was recently degraded due to failure of the cache node. What should a Solutions Architect recommend to minimize performance degradation in the future?

  A. Migrate from ElastiCache to Amazon RDS
  B. Configure automatic backup to save cache data
  C. Configure ElastiCache Multi-AZ with automatic failover
  D. Use Auto Scaling to provision cache nodes based on CPU usage
  C. Configure ElastiCache Multi-AZ with automatic failover

• Question 186:

  A Solutions Architect is asked to improve the fault tolerance of an existing Python application. The web application places 1-MB images is an S3 bucket. The application then uses a single t2.large instance to transform the image to include a watermark with the company's brand before writing the image back to the S3 bucket.

  What should the Solutions Architect recommend to increase the fault tolerance of the solution?

  A. Convert the code to a Lambda function triggered by scheduled Amazon CloudWatch Events.
  B. Increase the instance size to m4.xlarge and configure Enhanced Networking.
  C. Convert the code to a Lambda function triggered by Amazon S3 events.
  D. Create an Amazon SQS queue to send the images to the t2.large instance.
  C. Convert the code to a Lambda function triggered by Amazon S3 events.

• Question 187:

  A company is launching an application that it expects to be very popular. The company needs a database that can scale with the rest of the application. The schema will change frequently. The application cannot afford any downtime for

  database changes.

  Which AWS service allows the company to achieve these objectives?

  A. Amazon Redshift
  B. Amazon DynamoDB
  C. Amazon RDS MySQL
  D. Amazon Aurora
  B. Amazon DynamoDB

• Question 188:

  A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access.

  Which of the following would be the LEAST complicated implementation?

  A. Use an Amazon CloudFront distribution with an origin access identity (OAI). Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs. Design a Lambda function to remove data that is older than 14 days.
  B. Use an S3 bucket and provide direct access to the file. Design the application to track purchases in a DynamoDB table. Configure a Lambda function to remove data that is older than 14 days based on a query to Amazon DynamoDB.
  C. Use an Amazon CloudFront distribution with an OAI. Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs. Design the application to set an expiration of 14 days for the URI.
  D. Use an Amazon CloudFront distribution with an OAI. Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs. Design the application to set an expiration of 60 minutes for the URL, and recreate the URL as necessary.
  C. Use an Amazon CloudFront distribution with an OAI. Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs. Design the application to set an expiration of 14 days for the URI.

• Question 189:

  A company's policy requires that all data stored in Amazon S3 is encrypted. The company wants to use the option with the least overhead and does not want to manage any encryption keys. Which of the following options will meet the company's requirements?

  A. AWS CloudHSM
  B. AWS Trusted Advisor
  C. Server Side Encryption (SSE-S3)
  D. Server Side Encryption (SSE-KMS)
  C. Server Side Encryption (SSE-S3)

• Question 190:

  Which tool analyzes account resources and provides a detailed inventory of changes over time?

  A. AWS Config
  B. AWS CloudFormation
  C. Amazon CloudWatch D. AWS Service Catalog
  A. AWS Config