Amazon SAA-C01 Online Practice Questions and Exam Preparation

Amazon SAA-C01 Online Questions & Answers

• Question 51:

  You have deployed a three-tier web application in a VPC with a CIOR block of 10 0 0 0/28. You initially deploy two web servers, two application servers, two database servers and one NAT instance tor a total of seven EC2 instances. The

  web. Application and database servers are deployed across two availability zones (AZs). You also deploy an ELB in front of the two web servers, and use Route53 for DNS Web (raffle gradually increases in the first few days following the

  deployment, so you attempt to double the number of instances in each tier of the application to handle the new load unfortunately some of these new instances fail to launch.

  Which of the following could De the root caused? (Choose two.)

  A. AWS reserves the first and the last private IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances
  B. The Internet Gateway (IGW) of your VPC has scaled-up, adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches
  C. The ELB has scaled-up, adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches
  D. AWS reserves one IP address in each subnet's CIDR block for Route53 so you do not have enough addresses left to launch all of the new EC2 instances
  E. AWS reserves the first four and the last IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances
  C. The ELB has scaled-up, adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches
  E. AWS reserves the first four and the last IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances

• Question 52:

  Your company has an on-premises multi-tier PHP web application, which recently experienced downtime due to a large burst. In web traffic due to a company announcement. Over the coming days, you are expecting similar announcements

  to drive similar unpredictable bursts, and are looking to find ways to quickly improve your infrastructures ability to handle unexpected increases in traffic. The application currently consists of 2 tiers a web tier which consists of a load balancer

  and several Linux Apache web servers as well as a database tier which hosts a Linux server hosting a MySQL database.

  Which scenario below will provide full site functionality, while helping to improve the ability of your application in the short timeframe required?

  A. Failover environment: Create an S3 bucket and configure it for website hosting. Migrate your DNS to Route53 using zone file import, and leverage Route53 DNS failover to failover to the S3 hosted website.
  B. Hybrid environment: Create an AMI, which can be used to launch web servers in EC2. Create an Auto Scaling group, which uses the AMI to scale the web tier based on incoming traffic. Leverage Elastic Load Balancing to balance traffic between on-premises web servers and those hosted In AWS.
  C. Offload traffic from on-premises environment: Setup a CIoudFront distribution, and configure CloudFront to cache objects from a custom origin. Choose to customize your object cache behavior, and select a TTL that objects should exist in cache.
  D. Migrate to AWS: Use VM Import/Export to quickly convert an on-premises web server to an AMI. Create an Auto Scaling group, which uses the imported AMI to scale the web tier based on incoming traffic. Create an RDS read replica and setup replication between the RDS instance and on-premises MySQL server to migrate the database.
  C. Offload traffic from on-premises environment: Setup a CIoudFront distribution, and configure CloudFront to cache objects from a custom origin. Choose to customize your object cache behavior, and select a TTL that objects should exist in cache.

• Question 53:

  A Solutions Architect is designing a solution to send Amazon CloudWatch Alarm notifications to a group of users on a smartphone mobile application. What are the key steps to this solution? (Choose two.)

  A. Configure the CloudWatch Alarm to send the notification to an Amazon SNS topic whenever there is an alarm.
  B. Configure the CloudWatch Alarm to send the notification to a mobile phone number whenever there is an alarm.
  C. Configure the CloudWatch Alarm to send the notification to the email addresses whenever there is an alarm.
  D. Create the platform endpoints for mobile devices and subscribe the SNS topic with platform endpoints.
  E. Subscribe the SNS topic with an Amazon SQS queue, and poll the messages continuously from the queue. Use each mobile platform's libraries to send the message to the mobile application.
  A. Configure the CloudWatch Alarm to send the notification to an Amazon SNS topic whenever there is an alarm.
  D. Create the platform endpoints for mobile devices and subscribe the SNS topic with platform endpoints.

• Question 54:

  A company is looking for a fully-managed solution to store its players' state information for a rapidly growing game. The application runs on multiple Amazon EC2 nodes, which can scale according to the incoming traffic. The request can be routed to any of the nodes, therefore, the state information must be stored in a centralized database. The players' state information needs to be read with strong consistency and needs conditional updates for any changes.

  Which service would be MOST cost-effective, and scale seamlessly?

  A. Amazon S3
  B. Amazon DynamoDB
  C. Amazon RDS
  D. Amazon Redshift
  A. Amazon S3

• Question 55:

  A company has a website running on Amazon EC2. The application DNS name points to an Elastic IP address associated with the EC2 instance. In the event of an attack on the website coming from a specific IP address, the company wants a way to block the offending IP address.

  Which tool or service should a Solutions Architect recommend to block the IP address?

  A. Security groups
  B. Network ACL
  C. AWS WAF
  D. AWS Shield
  C. AWS WAF

• Question 56:

  You are designing an SSUTLS solution that requires HTTPS clients to be authenticated by the Web server using client certificate authentication. The solution must be resilient. Which of the following options would you consider for configuring the web server infrastructure? (Choose two.)

  A. Configure ELB with TCP listeners on TCP/4d3. And place the Web servers behind it.
  B. Configure your Web servers with EIPS Place the Web servers in a Route53 Record Set and configure health checks against all Web servers.
  C. Configure ELB with HTTPS listeners, and place the Web servers behind it.
  D. Configure your web servers as the origins for a CloudFront distribution. Use custom SSL certificates on your CloudFront distribution.
  A. Configure ELB with TCP listeners on TCP/4d3. And place the Web servers behind it.
  B. Configure your Web servers with EIPS Place the Web servers in a Route53 Record Set and configure health checks against all Web servers.

• Question 57:

  A Solutions Architect is designing a solution that includes a managed VPN connection. To monitor whether the VPN connection is up or down, the Architect should use:

  A. an external service to ping the VPN endpoint from outside the VPC.
  B. AWS CloudTrail to monitor the endpoint.
  C. the CloudWatch TunnelState Metric.
  D. an AWS Lambda function that parses the VPN connection logs.
  C. the CloudWatch TunnelState Metric.

• Question 58:

  A Solutions Architect must select the storage type for a big data application that requires very high sequential I/O. The data must persist if the instance is stopped. Which of the following storage types will provide the best fit at the LOWEST cost for the application?

  A. An Amazon EC2 instance store local SSD volume.
  B. An Amazon EBS provisioned IOPS SSD volume.
  C. An Amazon EBS throughput optimized HDD volume.
  D. An Amazon EBS general purpose SSD volume.
  C. An Amazon EBS throughput optimized HDD volume.

• Question 59:

  A Solutions Architect must design a storage solution for incoming billing reports in CSV format. The data does not need to be scanned frequently and is discarded after 30 days. Which service will be MOST cost-effective in meeting these requirements?

  A. Import the logs into an RDS MySQL instance.
  B. Use AWS Data Pipeline to import the logs into a DynamoDB table.
  C. Write the files to an S3 bucket and use Amazon Athena to query the data.
  D. Import the logs to an Amazon Redshift cluster
  C. Write the files to an S3 bucket and use Amazon Athena to query the data.

• Question 60:

  A Solutions Architect is designing a web application. The web and application tiers need to access the Internet, but they cannot be accessed from the Internet. Which of the following steps is required?

  A. Attach an Elastic IP address to each Amazon EC2 instance and add a route from the private subnet to the public subnet.
  B. Launch a NAT gateway in the public subnet and add a route to it from the private subnet.
  C. Launch Amazon EC2 instances in the public subnet and change the security group to allow outbound traffic on port 80.
  D. Launch a NAT gateway in the private subnet and deploy a NAT instance in the private subnet.
  B. Launch a NAT gateway in the public subnet and add a route to it from the private subnet.