Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 301:

  Your company currently has a 2-tier web application running in an on-premises data center. You have experienced several infrastructure failures in the past two months resulting in significant financial losses. Your CIO is strongly agreeing to

  move the application to AWS. While working on achieving buy-in from the other company executives, he asks you to develop a disaster recovery plan to help improve Business continuity in the short term. He specifies a target Recovery Time

  Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in size and you have a 20Mbps Internet connection.

  How would you do this while minimizing costs?

  A. Create an EBS backed private AMI which includes a fresh install of your application. Develop a CloudFormation template which includes your AMI and the required EC2, AutoScaling, and ELB resources to support deploying the application across Multiple- Availability-Zones. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.
  B. Deploy your application on EC2 instances within an Auto Scaling group across multiple availability zones. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.
  C. Create an EBS backed private AMI which includes a fresh install of your application. Setup a script in your data center to backup the local database every 1 hour and to encrypt and copy the resulting file to an S3 bucket using multi-part upload.
  D. Install your application on a compute-optimized EC2 instance capable of supporting the application's average load. Synchronously replicate transactions from your on-premises database to a database instance in AWS across a secure Direct Connect connection.
  A. Create an EBS backed private AMI which includes a fresh install of your application. Develop a CloudFormation template which includes your AMI and the required EC2, AutoScaling, and ELB resources to support deploying the application across Multiple- Availability-Zones. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.

• Question 302:

  A Solutions Architect is designing an application on AWS that uses persistent block storage. Data must be encrypted at rest. Which solution meets the requirement?

  A. Enable SSL on Amazon EC2 instances.
  B. Encrypt Amazon EBS volumes on Amazon EC2 instances.
  C. Enable server-side encryption on Amazon S3.
  D. Encrypt Amazon EC2 Instance Storage.
  B. Encrypt Amazon EBS volumes on Amazon EC2 instances.

• Question 303:

  One company wants to share the contents of their Amazon S3 bucket with another company. Security requirements mandate that only the other company's AWS accounts have access to the contents of the Amazon S3 bucket. Which Amazon S3 feature will allow secure access to the Amazon S3 bucket?

  A. Bucket policy
  B. Object tagging
  C. CORS configuration
  D. Lifecycle policy
  A. Bucket policy

• Question 304:

  An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants a particular group of IAM users to access only the test instances and not the production ones. They want to deploy the instances in various locations based on the factors that will change from time to time, especially in the test group. They expect instances will often need to be churned, i.e. deleted and replaced, especially in the testing group. This means the five instances they have created now will soon be replaced by a different set of five instances. The members of each group, production and testing, will not change in the foreseeable future. Given the situation, what choice below is the most efficient and time-saving strategy to define the IAM policy?

  A. By creating an IAM policy with a condition that allows access to only small instances
  B. By defining the IAM policy that allows access based on the instance ID
  C. By launching the test and production instances in separate regions and allowing region wise access to the group
  D. By defining the tags on the test and production team members IAM user IDs, and adding a condition to the IAM policy that allows access to specific tags
  D. By defining the tags on the test and production team members IAM user IDs, and adding a condition to the IAM policy that allows access to specific tags

• Question 305:

  A company has a Node.js application running on Amazon EC2 that currently retrieves data for customers from a DynamoDB table. The company is seeing many repeat queries for the same items, and the number of queries is continuing to increase as the application gains popularity.

  What solution will reduce the number of read capacity units (RCUs) required while minimizing the amount of refactoring that must be done to the application?

  A. Use Amazon ElastiCache to provide a caching layer
  B. Use a Lambda function to make concurrent requests for caching
  C. Use Amazon DynamoDB Accelerator (DAX) to provide a caching layer
  D. Obtain Reserved Capacity for Amazon DynamoDB to manage the increased number of queries
  C. Use Amazon DynamoDB Accelerator (DAX) to provide a caching layer

• Question 306:

  A website experiences unpredictable traffic. During peak traffic times, the database is unable to keep up with the write request. Which AWS service will help decouple the web application from the database?

  A. Amazon SQS
  B. Amazon EFS
  C. Amazon S3
  D. AWS Lambda
  A. Amazon SQS

• Question 307:

  A client reports that they want see an audit log of any changes made to AWS resources in their account. What can the client do to achieve this?

  A. Set up Amazon CloudWatch monitors on services they own
  B. Enable AWS CloudTrail logs to be delivered to an Amazon S3 bucket
  C. Use Amazon CloudWatch Events to parse logs
  D. Use AWS OpsWorks to manage their resources
  B. Enable AWS CloudTrail logs to be delivered to an Amazon S3 bucket

• Question 308:

  A Solutions Architect is reviewing an application that writes data to an Amazon DynamoDB table on a daily basis. Random table reads occur many times per second.

  The company needs to allow thousands of low-latency reads and avoid any negative impact to the rest of the application.

  What should the Solutions Architect do to meet the company's goals?

  A. Use DynamoDB Accelerator to cache reads.
  B. Increase DynamoDB write capacity units.
  C. Add Amazon SQS to decouple requests.
  D. Implement Amazon Kinesis to decouple requests.
  B. Increase DynamoDB write capacity units.

• Question 309:

  You've been hired to enhance the overall security posture for a very large e-commerce site. They have a well architected multi-tier application running in a VPC that uses ELBs in front of both the web and the app tier with static assets served

  directly from S3 They are using a combination of RDS and DynamoOB for their dynamic data and then archiving nightly into S3 for further processing with EMR They are concerned because they found questionable log entries and suspect

  someone is attempting to gain unauthorized access.

  Which approach provides a cost effective scalable mitigation to this kind of attack?

  A. Recommend that they lease space at a DirectConnect partner location and establish a 1G DirectConnect connection to theirvPC they would then establish Internet connectivity into their space, filter the traffic in hardware Web Application Firewall (WAF). And then pass the traffic through the DirectConnect connection into their application running in their VPC,
  B. Add previously identified hostile source IPs as an explicit INBOUND DENY NACL to the web tier subnet.
  C. Add a WAF tier by creating a new ELB and an AutoScalmg group of EC2 Instances running a host- based WAF They would redirect Route 53 to resolve to the new WAF tier ELB The WAF tier would thier pass the traffic to the current web tier The web tier Security Groups would be updated to only allow traffic from the WAF tier Security Group
  D. Remove all but TLS 1 2 from the web tier ELB and enable Advanced Protocol Filtering This will enable the ELB itself to perform WAF functionality.
  C. Add a WAF tier by creating a new ELB and an AutoScalmg group of EC2 Instances running a host- based WAF They would redirect Route 53 to resolve to the new WAF tier ELB The WAF tier would thier pass the traffic to the current web tier The web tier Security Groups would be updated to only allow traffic from the WAF tier Security Group

• Question 310:

  A mobile application serves scientific articles from individual files in an Amazon S3 bucket. Articles older than 30 days are rarely read. Articles older than 60 days no longer need to be available through the application, but the application owner would like to keep them for historical purposes.

  Which cost-effective solution BEST meets these requirements?

  A. Create a Lambda function to move files older than 30 days to Amazon EBS and move files older than 60 days to Amazon Glacier.
  B. Create a Lambda function to move files older than 30 days to Amazon Glacier and move files older than 60 days to Amazon EBS.
  C. Create lifecycle rules to move files older than 30 days to Amazon S3 Standard Infrequent Access and move files older than 60 days to Amazon Glacier.
  D. Create lifecycle rules to move files older than 30 days to Amazon Glacier and move files older than 60 days to Amazon S3 Standard Infrequent Access.
  C. Create lifecycle rules to move files older than 30 days to Amazon S3 Standard Infrequent Access and move files older than 60 days to Amazon Glacier.