Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 351:

  A Solutions Architect is creating an application running in an Amazon VPC that needs to access AWS Systems Manager Parameter Store. Network security rules prohibit any route table entry with a 0.0.0.0/0 destination. What infrastructure addition will allow access to the AWS service while meeting the requirements?

  A. VPC peering
  B. NAT instance
  C. NAT gateway
  D. AWS PrivateLink
  A. VPC peering

• Question 352:

  A customer has written an application that uses Amazon S3 exclusively as a data store. The application works well until the customer increases the rate at which the application is updating information. The customer now reports that outdated data occasionally appears when the application accesses objects in Amazon S3.

  What could be the problem, given that the application logic is otherwise correct?

  A. The application is reading parts of objects from Amazon S3 using a range header.
  B. The application is reading objects from Amazon S3 using parallel object requests.
  C. The application is updating records by writing new objects with unique keys.
  D. The application is updating records by overwriting existing objects with the same keys.
  A. The application is reading parts of objects from Amazon S3 using a range header.

• Question 353:

  A customer has a production application that frequently overwrites and deletes data, the application requires the most up-to-date version of the data every time it is requested. Which storage should a Solutions Architect recommend to bet accommodate this use case?

  A. Amazon S3
  B. Amazon RDS
  C. Amazon RedShift
  D. AWS Storage Gateway
  A. Amazon S3

• Question 354:

  A Solutions Architect is designing an Amazon VPC that requires access to a remote API server using IPv6. Resources within the VPC should not be accessed directly from the Internet. How should this be achieved?

  A. Use a NAT gateway and deny public access using security groups
  B. Attach an egress-only internet gateway and update the routing tables
  C. Use a NAT gateway and update the routing tables
  D. Attach an internet gateway and deny public access using security groups
  D. Attach an internet gateway and deny public access using security groups

• Question 355:

  An application is scanning an Amazon DynamoDB table that was created with default settings. The application occasionally reads stale data when it queries the table. How can this issue be corrected?

  A. Increase the provisioned read capacity of the table.
  B. Enable AutoScaling on the DynamoDB table.
  C. Update the application to use strongly consistent reads.
  D. Re-create the DynamoDB table with eventual consistency disabled.
  C. Update the application to use strongly consistent reads.

• Question 356:

  You are designing the network infrastructure for an application server in Amazon VPC Users will access all the application instances from the Internet as well as from an on-premises network The on- premises network is connected to your

  VPC over an AWS Direct Connect link.

  How would you design routing to meet the above requirements?

  A. Configure a single routing Table with a default route via the Internet gateway Propagate a default route via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets.
  B. Configure a single routing table with a default route via the internet gateway Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router Associate the routing table with all VPC subnets.
  C. Configure a single routing table with two default routes: one to the internet via an Internet gateway the other to the on-premises network via the VPN gateway use this routing table across all subnets in your VPC,
  D. Configure two routing tables one that has a default route via the Internet gateway and another that has a default route via the VPN gateway Associate both routing tables with each VPC subnet.
  B. Configure a single routing table with a default route via the internet gateway Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router Associate the routing table with all VPC subnets.

• Question 357:

  Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in high resolution MP4 format. Your workforce is distributed globally often on the move and using company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your company has no video transcoding expertise and it required you may need to pay for a consultant. How do you implement the most cost-efficient architecture without compromising high availability and quality of video delivery'?

  A. A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue. EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days. CloudFront to serve HLS transcoded videos from EC2.
  B. Elastic Transcoder to transcode original high-resolution MP4 videos to HLS. EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days. CloudFront to serve HLS transcoded videos from EC2.
  C. Elastic Transcoder to transcode original high-resolution MP4 videos to HLS. S3 to host videos with Lifecycle Management to archive original files to Glacier after a few days. CloudFront to serve HLS transcoded videos from S3.
  D. A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue. S3 to host videos with Lifecycle Management to archive all files to Glacier after a few days. CloudFront to serve HLS transcoded videos from Glacier.
  C. Elastic Transcoder to transcode original high-resolution MP4 videos to HLS. S3 to host videos with Lifecycle Management to archive original files to Glacier after a few days. CloudFront to serve HLS transcoded videos from S3.

• Question 358:

  A Solutions Architect is designing a stateful web application that will run for one year (24/7) and then be decommissioned. Load on this platform will be constant, using a number of r4.8xlarge instances. Key drivers for this system include high availability, but elastically is not required.

  What is the MOST cost-effective way to purchase compute for this platform?

  A. Scheduled Reserved Instances
  B. Convertible Reserved Instances
  C. Standard Reserved Instances
  D. Spot Instances
  C. Standard Reserved Instances

• Question 359:

  A popular e-commerce application runs on AWS. The application encounters performance issues. The database is unable to handle the amount of queries and load during peak times. The database is running on the RDS Aurora engine on

  the largest instance size available.

  What should an administrator do to improve performance?

  A. Convert the database to Amazon Redshift.
  B. Create a CloudFront distribution.
  C. Convert the database to use EBS Provisioned IOPS.
  D. Create one or more read replicas.
  C. Convert the database to use EBS Provisioned IOPS.

• Question 360:

  An AWS Lambda function requires access to an Amazon RDS for SQL Server instance. It is against company policy to store passwords in Lambda functions. How can a Solutions Architect enable the Lambda function to retrieve the database password without violating company policy?

  A. Add an IAM policy for IAM database access to the Lambda execution role.
  B. Store a one-way hash of the password in the Lambda function.
  C. Have the Lambda function use the AWS Systems Manager Parameter Store.
  D. Connect to the Amazon RDS for SQL Server instance by using a role assigned to the Lambda function.
  C. Have the Lambda function use the AWS Systems Manager Parameter Store.