Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 321:

  An application generates audit logs of operational activities. Compliance requirements mandate that the application retain the logs for 5 years. How can these requirements be met?

  A. Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA Delete) on the bucket.
  B. Save the logs in an Amazon EFS volume and use Network File System version 4 (NFSv4) locking with the volume.
  C. Save the logs in an Amazon Glacier vault and use the Vault Lock feature.
  D. Save the logs in an Amazon EBS volume and take monthly snapshots.
  A. Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA Delete) on the bucket.

• Question 322:

  A Solutions Architect is developing a new web application on AWS. The Architect expects the application to become very popular, so the application must scale to support the load. The Architect wants to focus on software development and deploying new features without provisioning or managing instances.

  What solution is appropriate?

  A. Amazon API Gateway and AWS Lambda
  B. Elastic Load Balancing with Auto Scaling groups and Amazon EC2
  C. Amazon API Gateway and Amazon EC2
  D. Amazon CloudFront and AWS Lambda
  D. Amazon CloudFront and AWS Lambda

• Question 323:

  A Solutions Architect is trying to bring a data warehouse workload to an Amazon EC2 instance. The data will reside in Amazon EBS volumes and full table scans will be executed frequently. What type of Amazon EBS volume would be most suitable in this scenario?

  A. Throughput Optimized HDD (st1)
  B. Provisioned IOPS SSD (io1)
  C. General Purpose SSD (gp2)
  D. Cold HDD (sc1)
  D. Cold HDD (sc1)

• Question 324:

  A Solutions Architect is designing a log-processing solution that requires storage that supports up to 500 MB/s throughput. The data is sequentially accessed by an Amazon EC2 instance. Which Amazon storage type satisfies these requirements?

  A. EBS Provisioned IOPS SSD (io1)
  B. EBS General Purpose SSD (gp2)
  C. EBS Throughput Optimized HDD (st1)
  D. EBS Cold HDD (sc1)
  C. EBS Throughput Optimized HDD (st1)

• Question 325:

  A Solutions Architect must review an application deployed on EC2 instances that currently stores multiple 5-GB files on attached instance store volumes. The company recently experienced a significant data loss after stopping and starting their instances and wants to prevent the data loss from happening again. The solution should minimize performance impact and the number of code changes required.

  What should the Solutions Architect recommend?

  A. Store the application data in Amazon S3
  B. Store the application data in an EBS volume
  C. Store the application data in Amazon ElastiCache
  D. Store the application data in Amazon DynamoDB
  B. Store the application data in an EBS volume

• Question 326:

  A Solutions Architect has designed a VPC that meets all necessary security requirements for their organization. Any applications deployed in the organization must use this VPC design.

  How can project teams deploy, manage, and delete VPCs that meet this design with the LEAST administrative effort?

  A. Deploy an AWS CloudFormation template that defines components of the VPC.
  B. Run a script that uses the AWS Command Line Interface to deploy the VPC.
  C. Clone the existing authorized VPC for each new project.
  D. Use AWS Elastic Beanstalk to deploy both the VPC and the application.
  B. Run a script that uses the AWS Command Line Interface to deploy the VPC.

• Question 327:

  An online company wants to conduct real-time sentiment analysis about its products from its social media channels using SQL. Which of the following solutions has the LOWEST cost and operational burden?

  A. Set up a streaming data ingestion application on Amazon EC2 and connect it to a Hadoop cluster for data processing. Send the output to Amazon S3 and use Amazon Athena to analyze the data.
  B. Configure the input stream using Amazon Kinesis Data Streams. Use Amazon Kinesis Data Analytics to write SQL queries against the stream.
  C. Configure the input stream using Amazon Kinesis Data Streams. Use Amazon Kinesis Data Firehose to send data to an Amazon Redshift cluster, and then query directly against Amazon Redshift
  D. Set up streaming data ingestion application on Amazon EC2 and send the output to Amazon S3 using Kinesis Data Firehose. Use Athena to analyze the data.
  B. Configure the input stream using Amazon Kinesis Data Streams. Use Amazon Kinesis Data Analytics to write SQL queries against the stream.

• Question 328:

  A company is moving to AWS. Management has identified a set of approved AWS services that meet all deployment requirements. The company would like to restrict access to all other unapproved services to which employees would have access.

  Which solution meets these requirements with the LEAST amount of operational overhead?

  A. Configure the AWS Trusted Advisor service utilization compliance report. Subscribe to Amazon SNS notifications from Trusted Advisor. Create a custom AWS Lambda function that can automatically remediate the use of unauthorized services.
  B. Use AWS Config to evaluate the configuration settings of AWS resources. Subscribe to Amazon SNS notifications from AWS Config. Create a custom AWS Lambda function that can automatically remediate the use of unauthorized services.
  C. Configure AWS Organizations. Create an organizational unit (OU) and place all AWS accounts into the OU. Apply a service control policy (SCP) to the OU that denies the use of certain services.
  D. Create a custom AWS IAM policy. Deploy the policy to each account using AWS CloudFormation StackSets. Include deny statements in the policy to restrict the use of certain services. Attach the policies to all IAM users in each account.
  C. Configure AWS Organizations. Create an organizational unit (OU) and place all AWS accounts into the OU. Apply a service control policy (SCP) to the OU that denies the use of certain services.

• Question 329:

  Your company plans to host a large donation website on Amazon Web Services (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS. Which service should you use?

  A. Amazon RDS with provisioned IOPS up to the anticipated peak write throughput.
  B. Amazon Simple Queue Service (SOS) for capturing the writes and draining the queue to write to the database.
  C. Amazon ElastiCache to store the writes until the writes are committed to the database.
  D. Amazon DynamoDB with provisioned write throughput up to the anticipated peak write throughput.
  B. Amazon Simple Queue Service (SOS) for capturing the writes and draining the queue to write to the database.

• Question 330:

  A Solutions Architect needs to deploy a node.js-based web application that is highly available and scales automatically. The Marketing team needs to roll back on application releases quickly, and they need to have an operational dashboard. The Marketing team does not want to manage deployment of OS patches to the Linux servers.

  Use of which AWS service will satisfy these requirements?

  A. Amazon EC2
  B. Amazon API Gateway
  C. AWS Elastic Beanstalk
  D. Amazon EC2 Container Service
  C. AWS Elastic Beanstalk