Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 41:

  A company is migrating its data center to AWS. As part of this migration, there is a three-tier web application that has strict data-at-rest encryption requirements. The customer deploys this application on Amazon EC2 using Amazon EBS, and now must provide encryption at-rest.

  How can this requirement be met without changing the application?

  A. Use AWS Key Management Service and move the encrypted data to Amazon S3.
  B. Use an application-specific encryption API with AWS server-side encryption.
  C. Use encrypted EBS storage volumes with AWS-managed keys.
  D. Use third-party tools to encrypt the EBS data volumes with Key Management Service Bring Your Own Keys.
  C. Use encrypted EBS storage volumes with AWS-managed keys.

• Question 42:

  An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least privilege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party. Which of the following would meet all of these conditions?

  A. From the AWS Management Console, navigate to the Security Credentials page and retrieve the access and secret key for your account.
  B. Create an IAM user within the enterprise account assign a user policy to the IAM user that allows only the actions required by the SaaS application create a new access and secret key for the user and provide these credentials to the SaaS provider.
  C. Create an IAM role for cross-account access allows the SaaS provider's account to assume the role and assign it a policy that allows only the actions required by the SaaS application.
  D. Create an IAM role for EC2 instances, assign it a policy that allows only the actions required tor the Saas application to work, provide the role ARM to the SaaS provider to use when launching their application instances.
  C. Create an IAM role for cross-account access allows the SaaS provider's account to assume the role and assign it a policy that allows only the actions required by the SaaS application.

• Question 43:

  A team has developed a new web application in an AWS Region that has three Availability Zones: AZ-a, AZ-b, and AZ-c. This application must be fault tolerant and needs at least six Amazon EC2 instances running at all times. The application must tolerate the loss of connectivity to any single Availability Zone so that the application can continue to run.

  Which configurations will meet these requirements? (Select TWO.)

  A. AZ-a with six EC2 instances, AZ-b with six EC2 instances, and AZ-c with no EC2 instances.
  B. AZ-a with four EC2 instances, AZ-b with two EC2 instances, and AZ-c with two EC2 instances.
  C. AZ-a with two EC2 instances, AZ-b with two EC2 instances, and AZ-c with two EC2 instances.
  D. AZ-a with three EC2 instances, AZ-b with three EC2 instances, and AZ-c with no EC2 instances.
  E. AZ-a with three EC2 instances, AZ-b with three EC2 instances, and AZ-c with three EC2 instances.
  B. AZ-a with four EC2 instances, AZ-b with two EC2 instances, and AZ-c with two EC2 instances.
  E. AZ-a with three EC2 instances, AZ-b with three EC2 instances, and AZ-c with three EC2 instances.

• Question 44:

  A customer is migrating to AWS and requires applications to access Network File System shares without code changes. Data is critical and accessed frequently. Which storage solution should a Solutions Architect recommend to maximize availability and durability?

  A. Amazon EBS
  B. Amazon S3
  C. AWS Storage Gateway for files
  D. Amazon EFS
  B. Amazon S3

• Question 45:

  What is an isolated database environment running in the cloud (Amazon RDS) called?

  A. DB Instance
  B. DB Server
  C. DB Unit
  D. DB Volume
  A. DB Instance

• Question 46:

  A retail company runs hourly flash sales and has a performance issue on its Amazon RDS for PostgreSQL database. The Database Administrators have identified that the issue with performance happens when finance and marketing employees refresh sales dashboards that are used for reporting real-time sales data.

  What should be done to resolve the issue without impacting performance?

  A. Create a Read Replica of the RDS PostgreSQL database and point the dashboards at the Read Replica.
  B. Move data from the RDS PostgreSQL database to Amazon Redshift nightly and point the dashboards at Amazon Redshift.
  C. Monitor the database with Amazon CloudWatch and increase the instance size, as necessary. Make no changes to the dashboards.
  D. Take an hourly snapshot of the RDS PostgreSQL database, and load the hourly snapshots to another database to which the dashboards are pointed.
  A. Create a Read Replica of the RDS PostgreSQL database and point the dashboards at the Read Replica.

• Question 47:

  A Solutions Architect needs to deploy an HTTP/HTTPS service on Amazon EC2 instances with support for WebSockets using load balancers. How can the Architect meet these requirements?

  A. Configure a Network Load Balancer.
  B. Configure an Application Load Balancer.
  C. Configure a Classic Load Balancer.
  D. Configure a Layer-4 Load Balancer.
  B. Configure an Application Load Balancer.

• Question 48:

  A media company asked a Solutions Architect to design a highly available storage solution to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs to be POSIX-compliant, scale dynamically, and be able to serve up to 100 concurrent EC2 instances.

  Which solution meets these requirements?

  A. Create an Amazon S3 bucket and store all of the documents in this bucket.
  B. Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2 instance(s).
  C. Use Amazon Glacier to store all of the documents.
  D. Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.
  D. Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.

• Question 49:

  An application runs on EC2 instances behind an Elastic Load Balancing Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. The application provides a RESTful interface with both synchronous and asynchronous operations. The asynchronous operations require up to 5 minutes to complete. Although the application must remain available at all times, after business hours, the traffic going to the application is greatly reduced and often results in the Auto Scaling group running the minimum number of On-Demand Instances.

  What should the Solutions Architect recommend to optimize the cost of the environment after business hours?

  A. Change the Availability Zones in which the instances were created to another Availability Zone in the same region with a lower cost.
  B. Replace all On-Demand Instances with Spot Instances in the Auto Scaling group.
  C. Purchase Reserved Instances for the minimum number of Auto Scaling instances.
  D. Reduce the number of minimum instances to 0. New requests to the Application Load Balancer create new instances.
  C. Purchase Reserved Instances for the minimum number of Auto Scaling instances.

• Question 50:

  A web design company currently runs several FTP servers that their 250 customers use to upload and download large graphic files. They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy

  and Keep costs to a minimum.

  What AWS architecture would you recommend?

  A. ASK their customers to use an S3 client instead of an FTP client. Create a single S3 bucket Create an IAM user for each customer Put the IAM Users in a Group that has an IAM policy that permits access to sub-directories within the bucket via use of the 'username' Policy variable.
  B. Create a single S3 bucket with Reduced Redundancy Storage turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket for each customer with a Bucket Policy that permits access only to that one customer.
  C. Create an auto-scaling group of FTP servers with a scaling policy to automatically scale-in when minimum network traffic on the auto-scaling group is below a given threshold. Load a central list of ftp users from S3 as part of the user Data startup script on each Instance.
  D. Create a single S3 bucket with Requester Pays turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket tor each customer with a Bucket Policy that permits access only to that one customer.
  A. ASK their customers to use an S3 client instead of an FTP client. Create a single S3 bucket Create an IAM user for each customer Put the IAM Users in a Group that has an IAM policy that permits access to sub-directories within the bucket via use of the 'username' Policy variable.