Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 331:

  For each DB Instance class, what is the maximum size of associated storage capacity?

  A. 5GB
  B. 1TB
  C. 6TB
  D. 500GB
  C. 6TB

• Question 332:

  A customer has a service based out of Oregon, U.S. and Paris, France. The application is storing data in an S3 bucket located in Oregon, and that data is updated frequently. The Paris office is experiencing slow response times when retrieving objects.

  What should a Solutions Architect do to resolve the slow response times for the Paris office?

  A. Set up an S3 bucket based in Paris, and enable cross-region replication from the Oregon bucket to the Paris bucket.
  B. Create an Application Load Balancer that load balances data retrieval between the Oregon S3 bucket and a new Paris S3 bucket.
  C. Create an Amazon CloudFront distribution with the bucket located in Oregon as the origin and set the Maximum Time to Live (TTL) for cache behavior to 0.
  D. Set up an S3 bucket based in Paris, and enable a lifecycle management rule to transition data from the Oregon bucket to the Paris bucket.
  A. Set up an S3 bucket based in Paris, and enable cross-region replication from the Oregon bucket to the Paris bucket.

• Question 333:

  A Solutions Architect is designing a web application for document sharing. The users will upload documents that are then made available to other users. There will be tens of thousands of these documents. What is the MOST cost-effective storage solution?

  A. Amazon EFS
  B. Amazon S3
  C. Amazon Glacier
  D. Amazon EBS
  A. Amazon EFS

• Question 334:

  A Solutions Architect is designing a three-tier web application that includes an Auto Scaling group of Amazon EC2 instances running behind an ELB Classic Load Balancer. The security team requires that all web servers must be accessible only through the Load Balancer, and that none of the web servers are directly accessible from the Internet.

  How should the Architect meet these requirements?

  A. Use a Load Balancer installed on an Amazon EC2 instance.
  B. Configure the web servers' security group to deny traffic from the public Internet.
  C. Create an Amazon CloudFront distribution in front of the ELB Classic Load Balancer.
  D. Configure the web tier security group to allow only traffic from the ELB Classic Load Balancer.
  D. Configure the web tier security group to allow only traffic from the ELB Classic Load Balancer.

• Question 335:

  Can a 'user' be associated with multiple AWS accounts?

  A. No
  B. Yes
  A. No

• Question 336:

  A company hosts a website using Amazon API Gateway on the front end. Recently, there has been heavy traffic on the website and the company wants to control access by allowing authenticated traffic only. How should the company limit access to authenticated users only? (Select TWO.)

  A. Allow users that are authenticated through Amazon Cognito.
  B. Limit traffic through API Gateway.
  C. Allow X.509 certificates to authenticate traffic.
  D. Deploy AWS KMS to identify users.
  E. Assign permissions in AWS IAM to allow users.
  A. Allow users that are authenticated through Amazon Cognito.
  E. Assign permissions in AWS IAM to allow users.

• Question 337:

  A Solutions Architect is designing a Lambda function that calls an API to list all running Amazon RDS instances. How should the request be authorized?

  A. Create an IAM access and secret key, and store it in the Lambda function.
  B. Create an IAM role to the Lambda function with permissions to list all Amazon RDS instances.
  C. Create an IAM role to Amazon RDS with permissions to list all Amazon RDS instances.
  D. Create an IAM access and secret key, and store it in an encrypted RDS database.
  C. Create an IAM role to Amazon RDS with permissions to list all Amazon RDS instances.

• Question 338:

  Two Auto Scaling applications, Application A and Application B, currently run within a shared set of subnets. A Solutions Architect wants to make sure that Application A can make requests to Application B, but Application B should be denied from making requests to Application A.

  Which is the SIMPLEST solution to achieve this policy?

  A. Using security groups that Reference: the security groups of the other application
  B. Using security groups that Reference: the application server's IP addresses
  C. Using Network Access Control Lists to allow/deny traffic based on application IP addresses
  D. Migrating the applications to separate subnets from each other
  A. Using security groups that Reference: the security groups of the other application

• Question 339:

  A customer owns a simple API for their website that receives about 1,000 requests each day and has an average response time of 50 ms. It is currently hosted on one c4.large instance. Which changes to the architecture will provide high availability at the LOWEST cost?

  A. Create an Auto Scaling group with a minimum of one instance and a maximum of two instances, then use an Application Load Balancer to balance the traffic.
  B. Recreate the API using Amazon API Gateway and use AWS Lambda as the service backend.
  C. Create an Auto Scaling group with a maximum of two instances, then use an Application Load Balancer to balance the traffic.
  D. Recreate the API using Amazon API Gateway and integrate the new API with the existing backend service.
  A. Create an Auto Scaling group with a minimum of one instance and a maximum of two instances, then use an Application Load Balancer to balance the traffic.

• Question 340:

  You are setting up security groups for both incoming traffic and outgoing traffic in your VPC network on the AWS CLI. Which of the following AWS CLI commands would you use for adding one or more incoming traffic rules to a security group?

  A. authorize-security-group-egress
  B. authorize-security-group-ingress
  C. Grant-EC2SecurityGroupOutgress
  D. Get-EC2SecurityGroup
  B. authorize-security-group-ingress