Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 991:

  Which AWS service can a company use to store and manage Docker images?

  A. Amazon DynamoDB
  B. Amazon Kinesis Data Streams
  C. Amazon Elastic Container Registry (Amazon ECR)
  D. Amazon Elastic File System (Amazon EFS)
  C. Amazon Elastic Container Registry (Amazon ECR)

• Question 992:

  A company's security team requests that network traffic be captured in VPC Flow Logs The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs'?

  A. Use Amazon CloudWatch as the target Set the CloudWatch log group with an expiration of 90 days
  B. Use Amazon Kinesis as the target Configure the Kinesis stream to always retain the logs for 90 days 1C.
  C. Use AWS CloudTrail as the target Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering
  D. Use Amazon S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard- IA) after 90 days
  D. Use Amazon S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard- IA) after 90 days

• Question 993:

  A company's web application uses an Amazon RDS PostgreSQL DB instance to store its application data.

  During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web

  application.

  What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

  A. Create a read replica and direct reporting traffic to the replica.
  B. Create a Multi-AZ database and direct reporting traffic to the standby.
  C. Create a cross-Region read replica and direct reporting traffic to the replica.
  D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.
  A. Create a read replica and direct reporting traffic to the replica.

  ---

  Explanation/Reference:

  Amazon RDS uses the MariaDB, MySQL, Oracle, PostgreSQL, and Microsoft SQL Server DB engines' built-in replication functionality to create a special type of DB instance called a read replica from a source DB instance. Updates made to the source DB instance are asynchronously copied to the read replica. You can reduce the load on your source DB instance by routing read queries from your applications to the read replica. When you create a read replica, you first specify an existing DB instance as the source. Then Amazon RDS takes a snapshot of the source instance and creates a read-only instance from the snapshot. Amazon RDS then uses the asynchronous replication method for the DB engine to update the read replica whenever there is a change to the source DB instance. The read replica operates as a DB instance that allows only read-only connections. Applications connect to a read replica the same way they do to any DB instance. Amazon RDS replicates all databases in the source DB instance.

  https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.html

• Question 994:

  A company uses a combination of Amazon EC2 instances and AWS Fargate tasks to process daily transactions. The company faces unpredictable and sudden increases in transaction volume. The company needs a solution that will process the transactions immediately.

  Which solution meets these requirement MOST cost-effectively?

  A. Purchase a Compute Savings Plan
  B. Purchase an EC2 Instance Savings Plan.
  C. Purchase Reserved Instances tor existing EC2 workloads.
  D. Use Spot Instances for existing EC2 workloads.
  E. Use Far gale Spot capacity for the tasks.
  B. Purchase an EC2 Instance Savings Plan.

• Question 995:

  A company needs to migrate a legacy application from an on-premises data center to the AWS Cloud because of hardware capacity constraints. The application runs 24 hours a day. and days a week,. The application database storage continues to grow over time.

  What should a solution architect do to meet these requirements MOST cost-affectivity?

  A. Migrate the application layer to Amazon FC2 Spot Instances Migrate the data storage layer to Amazon S3.
  B. Migrate the application layer to Amazon EC2 Reserved Instances Migrate the data storage layer to Amazon RDS On-Demand Instances.
  C. Migrate the application layer to Amazon EC2 Reserved instances Migrate the data storage layer to Amazon Aurora Reserved Instances.
  D. Migrate the application layer to Amazon EC2 On Demand Amazon Migrate the data storage layer to Amazon RDS Reserved instances.
  C. Migrate the application layer to Amazon EC2 Reserved instances Migrate the data storage layer to Amazon Aurora Reserved Instances.

• Question 996:

  A company is storing sensitive user information in an Amazon S3 bucket. The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC. Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

  A. Configure a VPC gateway endpoint for Amazon S3 within the VPC.
  B. Create a bucket policy to make the objects in the S3 bucket public.
  C. Create a bucket policy that limits access to only the application tier running in the VPC.
  D. Create an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance.
  E. Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket.
  A. Configure a VPC gateway endpoint for Amazon S3 within the VPC.
  C. Create a bucket policy that limits access to only the application tier running in the VPC.

  ---

  Explanation/Reference:

• Question 997:

  A company needs to develop a repeatable solution to process time-ordered information from websites around the world. The company collects the data from the websites by using Amazon Kinesis Data Streams and stores the data in Amazon

  S3.

  The processing logic needs to collect events and handle data from the last 5 years.

  The processing logic also must generate results m an S3 bucket so that a business intelligence application can analyze and compare the results. The processing must be repeated multiple times.

  What should a solutions architect do to meet these requirements?

  A. Use Amazon S3 to collect events. Create an AWS Lambda function to process the events. Create different Lambda functions to handle repeated processing.
  B. Use Amazon EventBridge (Amazon CloudWatch Events) to collect events Set AWS Lambda as an event target. Use EventBridge (CloudWatch Events) to create an archive for the events and to replay the events.
  C. Use an Amazon Simple Queue Service (Amazon SQS) FIFO queue to collect events. Process the events by using Amazon EC2. Use AWS Step Function to create an archive for the events and to replay the events.
  D. Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to collect events. Process the events by using Amazon Elastic Kubemetes Service (Amazon EKS) Use Amazon MSK to create an archive for the events and to replay the events.
  B. Use Amazon EventBridge (Amazon CloudWatch Events) to collect events Set AWS Lambda as an event target. Use EventBridge (CloudWatch Events) to create an archive for the events and to replay the events.

• Question 998:

  Which solution will improve the performance of the application when it is moved to AWS?

  A. Import the data into an Amazon DynamoDB table with provisioned capacity. Refactor the application to use DynamoDB for reports.
  B. Create the database on a compute optimized Amazon EC2 instance Ensure compute resources exceed the on-premises database
  C. Create an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replicas. Configure the application to use the reader endpoint tor reports.
  D. Create an Amazon Aurora MySQL Multi-AZ DB cluster Configure The application to use the backup instance of the cluster as an endpoint for the reports.
  D. Create an Amazon Aurora MySQL Multi-AZ DB cluster Configure The application to use the backup instance of the cluster as an endpoint for the reports.

• Question 999:

  A company is creating a three-tier web application consisting of a web server, an application server, and a database server. The application will track GPS coordinates of packages as they are being delivered. The application will update the

  database every 0-5 seconds. The tracking will need to read a fast as possible for users to check the status of their packages. Only a few packages might be tracked on some days, whereas millions of package might be tracked on other days.

  Tracking will need to be searchable by tracking ID customer ID and order ID Order than 1 month no longer read to be tracked.

  What should a solution architect recommend to accomplish this with minimal cost of ownership?

  A. Use Amazon DynamoDB Enable Auto Scaling on the DynamoDB table. Schedule an automatic deletion script for items older than 1 month.
  B. Use Amazon DynamoDB with global secondary indexes. Enable Auto Scaling on the DynamoDB table and the global secondary indexes. Enable TTL on the DynamoDB table.
  C. Use an Amazon RDS On-Demand instance with Provisioned IOPS (PIOPS). Enable Amazon CloudWatch alarms to send notifications when PIOPS are exceeded. Increase and decrease PIOPS as needed.
  D. Use a Amazon RDS Reserved Instance with Provisioned IOPS (PIOPS). Enable Amazon CloudWatch alarms to send notification when PIOPS are exceeded. Increase and decrease PIOPS as needed.
  B. Use Amazon DynamoDB with global secondary indexes. Enable Auto Scaling on the DynamoDB table and the global secondary indexes. Enable TTL on the DynamoDB table.

• Question 1000:

  A company wants to automate the security assessment of its Amazon EC2 instances. The company needs to validate and demonstrate that security and compliance standards are being followed throughout the development process What should a solutions architect do to meet these requirements?

  A. Use Amazon Macie to automatically discover, classify and protect the EC2 instances
  B. Use Amazon GuardDuty to publish Amazon Simple Notification Service (Amazon SNS) notifications.
  C. Use Amazon Inspector with Amazon CloudWatch to publish Amazon Simple Notification Service (Amazon SNS) notifications
  D. Use Amazon EventBridge (Amazon CloudWatch Events) to detect and react to changes in the status of AWS Trusted Advisor checks
  C. Use Amazon Inspector with Amazon CloudWatch to publish Amazon Simple Notification Service (Amazon SNS) notifications