Amazon Amazon Certifications SAA-C02 Questions & Answers

• Question 991:

  A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.

  How should the scaling be changed to address the staff complaints and keep costs to a minimum?

  A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens

  B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.

  C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period

  D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens

  Correct Answer: A

  Reference: https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-simple-step.html

• Question 992:

  A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications. Which solution will meet these requirements?

  A. Amazon DynamoDB

  B. Amazon RDS for MySQL

  C. MySQL-compatible Amazon Aurora Serverless

  D. MySQL deployed on Amazon EC2 in an Auto Scaling group

  Correct Answer: B

• Question 993:

  A solution architect is designing a hybrid application using the AWS cloud. The network between the on-premises data center and AWS will use an AWS Direct Connect (DX) connection. The application connectivity between AWS and the on-premises data center must be highly resilient. Which DX configuration should be implemented to meet these requirements?

  A. Configure a DX connection with a VPN on top of it.

  B. Configure DX connections at multiple DX locations.

  C. Configure a DX connection using the most reliable DX partner.

  D. Configure multiple virtual interfaces on top of a DX connection.

  Correct Answer: B

• Question 994:

  A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch executes This causes the CPU utilization of the EC2 instances to immediately peak to 100%. which disrupts the application What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

  A. Configure an Amazon CloudFront distribution in front of the ALB

  B. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization

  C. Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.

  D. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances

  Correct Answer: C

  Scheduled Scaling for Amazon EC2 Auto Scaling Scheduled scaling allows you to set your own scaling schedule. For example, let's say that every week the traffic to your web application starts to increase on Wednesday, remains high on Thursday, and starts to decrease on Friday. You can plan your scaling actions based on the predictable traffic patterns of your web application. Scaling actions are performed automatically as a function of time and date. https://docs.aws.amazon.com/autoscaling/ec2/userguide/schedule_time.html

• Question 995:

  A company's dynamic website is hosted using on-premises servers in the United States. The company is launching its product in Europe and it wants to optimize site loading times for new European users. The site's backend must remain in the United States. The product is being launched in a few days, and an immediate solution is needed What should the solutions architect recommend?

  A. Launch an Amazon EC2 instance in us-east-1 and migrate the site to it

  B. Move the website to Amazon S3 Use cross-Region replication between Regions.

  C. Use Amazon CloudFront with a custom origin pointing to the on-premises servers

  D. Use an Amazon Route 53 geoproximity routing policy pointing to on-premises servers

  Correct Answer: C

• Question 996:

  A company has developed a microservices application It uses a client-facing API with Amazon API Gateway and multiple internal services hosted on Amazon EC2 instances to process user requests The API is designed to support

  unpredictable surges in traffic, but internal services may become overwhelmed and unresponsive for a period of time during surges A solutions architect needs to design a more reliable solution that reduces errors when internal services

  become unresponsive or unavailable.

  Which solution meets these requirements?

  A. Use AWS Auto Scaling to scale up internal services when there is a surge m traffic.

  B. Use different Availability Zones to host internal services Send a notification to a system administrator when an internal service becomes unresponsive

  C. Use an Elastic Load Balancer to distribute the traffic between internal services Configure Amazon CloudWatch metrics to monitor traffic to internal services

  D. Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive Change the internal services to retrieve the requests from the queue for processing

  Correct Answer: D

  SQS -> API Gateway as the single point of entry -> multiple internal services Because "reduces errors when internal services become unresponsive or unavailable." means it's ok when they are unavailable, just need not to loose requests

• Question 997:

  A company has media and application files that need to be shared internally. Users currently are authenticated using Active Directory and access files from a Microsoft Windows platform. The chief execute officer wants to keep the same user

  permissions, but wants the company to improve the process as the company is reaching its storage capacity limit.

  What should a solutions architect recommend?

  A. Set up a corporate Amazon S3 bucket and move and media and application files.

  B. Configure Amazon FSx for Windows File Server and move all the media and application files.

  C. Configure Amazon Elastic File System (Amazon EFS) and move all media and application files.

  D. Set up Amazon EC2 on Windows, attach multiple Amazon Elastic Block Store (Amazon EBS) volumes and, and move all media and application files.

  Correct Answer: B

• Question 998:

  A company is hosting its static website in an Amazon S3 bucket, which is the origin for Amazon CioudFront. The company has users in the United States. Canada, and Europe and wants to reduce costs. What should a solutions architect recommend?

  A. Adjust the CloudFront caching time to live (TTL) from the default to a longer timeframe.

  B. Implement CloudFront events with Lambda@Edge to run the website's data processing.

  C. Modify the CloudFront price class to include only the locations of the countries that are served.

  D. Implement a CloudFront Secure Sockets Layer (SSL) certificate to push security closer to the locations of the countries that are served.

  Correct Answer: C

  A. This could be an option, since static content won't change that much.

  B. It's a static website, there is no processing.

  D. What does an SSL have to do with reducing costs?

  CloudFront edge locations are grouped into geographic regions, and we've grouped regions into price classes. The default price class includes all regions. Another price class includes most regions (the United States; Canada; Europe; Hong Kong, Philippines, South Korea, Taiwan, and Singapore; Japan; India; South Africa; and Middle East regions) but excludes the most expensive regions. A third price class includes only the least expensive regions (the United States, Canada, and Europe regions).

  https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PriceClass.html

• Question 999:

  A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached. The peak capacity is the same every night and the batch jobs always start at IAM. The solutions architect needs to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scaling group to scale down after the batch jobs are complete.

  What should the solutions architect do to meet these requirements?

  A. Increase the minimum capacity for the Auto Scaling group.

  B. Increase the maximum capacity for the Auto Scaling group.

  C. Configure scheduled scaling to scale up to the desired compute level.

  D. Change the scaling policy to add more EC2 instances during each scaling operation.

  Correct Answer: C

• Question 1000:

  A company's legacy application is currently relying on a single-instance Amazon RDS MySQL database without encryption Due to new compliance requirements, all existing and new data in this database must be encrypted

  How should this be accomplished?

  A. Create an Amazon S3 bucket with server-side encryption enabled Move all the data to Amazon S3 Delete the RDS instance

  B. Enable RDS Multi-AZ mode with encryption at rest enabled Perform a failover to the standby instance to delete the original instance

  C. Take a snapshot of the RDS instance Create an encrypted copy of the snapshot. Restore the RDS instance from the encrypted snapshot

  D. Create an RDS read replica with encryption at rest enabled Promote the read replica to master and switch the application over to the new master Delete the old RDS instance.

  Correct Answer: C

  How do I encrypt Amazon RDS snapshots?

  The following steps are applicable to Amazon RDS for MySQL, Oracle, SQL Server, PostgreSQL, or MariaDB.

  Important: If you use Amazon Aurora, you can restore an unencrypted Aurora DB cluster snapshot to an encrypted Aurora DB cluster if you specify an AWS Key Management Service (AWS KMS) encryption key when you restore from the

  unencrypted DB cluster snapshot. For more information, see Limitations of Amazon RDS Encrypted DB Instances.

  Open the Amazon RDS console, and then choose Snapshots from the navigation pane.

  Select the snapshot that you want to encrypt.

  Under Snapshot Actions, choose Copy Snapshot.

  Choose your Destination Region, and then enter your New DB Snapshot Identifier.

  Change Enable Encryption to Yes.

  Select your Master Key from the list, and then choose Copy Snapshot. After the snapshot status is available, the Encrypted field will be True to indicate that the snapshot is encrypted. You now have an encrypted snapshot of your DB. You

  can use this encrypted DB snapshot to restore the DB instance from the DB snapshot.

  https://aws.amazon.com/premiumsupport/knowledge-center/encrypt-rds-snapshots/