Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 91:

  Which is a valid Amazon Resource name (ARN) for IAM?

  A. aws:iam::123456789012:instance-profile/\Nebserver
  B. arn:aws:iam::123456789012:instance-profile/Webserver
  C. 123456789012:aws:iam::instance-profi|e/\Nebserver
  D. arn:aws:iam::123456789012::instance-profile/\Nebserver
  B. arn:aws:iam::123456789012:instance-profile/Webserver

• Question 92:

  A company has an application running on Amazon EC2 On-Demand Instances. The application does not scale, and the Instances run In one AWS Region. The company wants the flexibility to change the operating system from Windows to AWS Linux in the future. The company needs to reduce the cost of the instances without creating additional operational overhead or changes to the application What should the company purchase lo meet these requirements MOST cost-effectively?

  A. Dedicated Hosts for the Instance type being used
  B. A Compute Savings Plan for the instance type being used
  C. An EC2 Instance Savings Plan (or the instance type being used
  D. Convertible Reserved Instances tor the instance type being used
  D. Convertible Reserved Instances tor the instance type being used

• Question 93:

  A company runs a web service on Amazon CC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across two Availability zones I he company needs a minimum of tour instances at all limes to meet the required service level agreement (SLA) while keeping costs low If an Availability Zone tails, how can the company remain compliant with the SLA?

  A. Add a target tracking scaling policy with a short cooldown period
  B. Change the Auto Scaling group launch configuration to use a larger instance type
  C. Change the Auto Scaling group to use six servers across three Availability Zones
  D. Change the Auto Scaling group to use eight servers across two Availability Zones
  C. Change the Auto Scaling group to use six servers across three Availability Zones

  ---

  Explanation/Reference:

• Question 94:

  A company has a web application hosted over 10 Amazon CC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error.

  What should a solutions architect implement to overcome these timeout errors?

  A. Create a Route 53 simple touting policy record lot each EC2 instance Associate a hearth check with each record
  B. Create a Route 53 failover routing policy record for each EC2 instance Associate a health check with each record
  C. Create an Amazon CloudFront distribution with EC? instances as its origin Associate a health check with the EC2 instances
  D. Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances Route to the ALB from Route 53
  D. Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances Route to the ALB from Route 53

  ---

  Explanation/Reference:

• Question 95:

  An administrator of a large company wants to monitor for and prevent any cryptocurrency-related attacks on the company"s AWS accounts Which AWS service can the administrator use to protect the company against attacks?

  A. Amazon Cognito
  B. Amazon GuardDuty
  C. Amazon Inspector
  D. Amazon Macie
  B. Amazon GuardDuty

  ---

  Explanation/Reference:

• Question 96:

  A company is selling up an application to use an Amazon RDS MySQL DB instance. The database must be architected for high availability across Availability Zones and AWS Regions with minimal downtime. How should a solutions architect meet this requirement?

  A. Set up an RDS MySQL Multi-AZ DB instance. Configure an appropriate backup window.
  B. Set up an RDS MySQL Multi-AZ DB instance. Configure a read replica in a different Region.
  C. Set up an RDS MySQL Single-AZ DB instance. Configure a read replica in a different Region.
  D. Set up an RDS MySQL Single-AZ DB instance. Copy automated snapshots to at least one other Region.
  C. Set up an RDS MySQL Single-AZ DB instance. Configure a read replica in a different Region.

• Question 97:

  A company has data stored in an on-premises data center that is used by several on-premises applications. The company wants to maintain its existing application environment and be able to use AWS services for data analytics and future visualizations. Which storage service should a solutions architect recommend?

  A. Amazon Redshift
  B. AWS Storage Gateway for files
  C. Amazon Elastic Block Store (Amazon EBS)
  D. Amazon Elastic File System (Amazon EFS)
  B. AWS Storage Gateway for files

• Question 98:

  A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications. Which solution will meet these requirements?

  A. Amazon DynamoDB
  B. Amazon RDS for MySQL
  C. MySQL-compatible Amazon Aurora Serverless
  D. MySQL deployed on Amazon EC2 in an Auto Scaling group
  B. Amazon RDS for MySQL

• Question 99:

  An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database What should the solutions architect do to separate the read requests from the write requests?

  A. Enable read-through caching on the Amazon Aurora database
  B. Update the application to read from the Multi-AZ standby instance
  C. Create a read replica and modify the application to use the appropriate endpoint
  D. Create a second Amazon Aurora database and link it to the primary database as a read replica.
  C. Create a read replica and modify the application to use the appropriate endpoint

  ---

  Explanation/Reference:

  Amazon RDS Read Replicas provide enhanced performance and durability for RDS database (DB) instances. They make it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads. You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput. Read replicas can also be promoted when needed to become standalone DB instances. Read replicas are available in Amazon RDS for MySQL, MariaDB, PostgreSQL, Oracle, and SQL Server as well as Amazon Aurora. For the MySQL, MariaDB, PostgreSQL, Oracle, and SQL Server database engines, Amazon RDS creates a second DB instance using a snapshot of the source DB instance. It then uses the engines' native asynchronous replication to update the read replica whenever there is a change to the source DB instance. The read replica operates as a DB instance that allows only read-only connections; applications can connect to a read replica just as they would to any DB instance. Amazon RDS replicates all databases in the source DB instance.

  Amazon Aurora futher extends the benefits of read replicas by employing an SSD-backed virtualized storage layer purpose-built for database workloads. Amazon Aurora replicas share the same underlying storage as the source instance, lowering costs and avoiding the need to copy data to the replica nodes. For more information about replication with Amazon Aurora, see the online documentation.

  

  https://aws.amazon.com/rds/features/read-replicas/

• Question 100:

  A company wants its public web application to run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application must use a publicly trusted SSL certificate. Which solution will meet these requirements MOST cost-effectively?

  A. Provision a public SSL/TLS certificate through AWS Certificate Manager (ACM). Configure the new certificate on the HTTPS listener for the ALB.
  B. Use AWS Certificate Manager Private Certificate Authonty to issue an SSL/TLS certificate. Configure the new certificate on the HTTPS listener for the ALB.
  C. Create a self-signed certificate on one of the EC2 instances in the Auto Scaling group. Export the certificate, and configure it on the HTTPS listener for the ALB.
  D. Deploy an EC2-hosted certificate authority (CA). Import a trusted root certificate. Issue a new SSL/TLS certificate. Configure the new certificate on the HTTPS listener for the ALB.
  A. Provision a public SSL/TLS certificate through AWS Certificate Manager (ACM). Configure the new certificate on the HTTPS listener for the ALB.