Amazon Amazon Certifications SAA-C02 Questions & Answers

• Question 1001:

  A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and introduce unfair advantages to some players The application is deployed in every AWS

  Region it runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs) A solutions architect needs to implement a mechanism to monitor the health of the application and redirect

  traffic to healthy endpoints.

  Which solution meets these requirements?

  A. Configure an accelerator in AWS Global Accelerator Add a listener for the port that the application listens on. and attach it to a Regional endpoint in each Region Add the ALB as the endpoint

  B. Create an Amazon CloudFront distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers Use AWS Lambda functions to optimize the traffic

  C. Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic

  D. Configure an Amazon DynamoDB database to serve as the data store for the application Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

  Correct Answer: A

  When you have an Application Load Balancer or Network Load Balancer that includes multiple target groups, Global Accelerator considers the load balancer endpoint to be healthy only if each target group behind the load balancer has at least one healthy target. If any single target group for the load balancer has only unhealthy targets, Global Accelerator considers the endpoint to be unhealthy.

  https://docs.aws.amazon.com/global-accelerator/latest/dg/about-endpoint-groups-health-checkoptions.html

• Question 1002:

  A company runs a web service on Amazon CC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across two Availability zones I he company needs a minimum of tour instances at all limes to meet the required service level agreement (SLA) while keeping costs low If an Availability Zone tails, how can the company remain compliant with the SLA?

  A. Add a target tracking scaling policy with a short cooldown period

  B. Change the Auto Scaling group launch configuration to use a larger instance type

  C. Change the Auto Scaling group to use six servers across three Availability Zones

  D. Change the Auto Scaling group to use eight servers across two Availability Zones

  Correct Answer: C

• Question 1003:

  A company is building applications in containers. The company wants to migrate its on-premises development and operations services from its on-premises data center to AWS. Management states that production system must be cloud agnostic and use the same configuration and administrator tools across production systems. A solutions architect needs to design a managed solution that will align open-source software.

  Which solution meets these requirements?

  A. Launch the containers on Amazon EC2 with EC2 instance worker nodes.

  B. Launch the containers on Amazon Elastic Kubernetes Service (Amazon EKS) and EKS workers nodes.

  C. Launch the containers on Amazon Elastic Containers service (Amazon ECS) with AWS Fargate instances.

  D. Launch the containers on Amazon Elastic Container Service (Amazon EC) with Amazon EC2 instance worker nodes.

  Correct Answer: B

• Question 1004:

  A company has hired a new cloud engineer who should not have access to an Amazon S3 bucket named CompanyConfidential. The cloud engineer must be able to read from and write to an S3 bucket called AdminTools.

  Which IAM policy will meet these requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 1005:

  A solutions architect is designing a customer-facing application. The application is expected to have a variable amount of reads and writes depending on the time of year and clearly defined access patterns throughout the year. Management

  requires that database auditing and scaling be managed in the AWS Cloud. The Recovery Point Objective (RPO) must be less than 5 hours.

  Which solutions can accomplish this? (Select TWO.)

  A. Use Amazon DynamoDB with auto scaling. Use on-demand backups and AWS CloudTrail.

  B. Use Amazon DynamoDB with auto scaling. Use on-demand backups and Amazon DynamoDB Streams.

  C. Use Amazon Redshift Configure concurrency scaling. Enable audit logging. Perform database snapshots every 4 hours.

  D. Use Amazon RDS with Provisioned IOPS. Enable the database auditing parameter. Perform database snapshots every 5 hours.

  E. Use Amazon RDS with auto scaling. Enable the database auditing parameter. Configure the backup retention period to at least 1 day.

  Correct Answer: AB

• Question 1006:

  A company runs an application in a branch office within a small data closet with no virtualized compute resources. The application data is stored on an NFS volume. Compliance standards require a daily offsite backup of the NFS volume. Which solution meet these requirements?

  A. Install an AWS Storage Gateway file gateway on premises to replicate the data to Amazon S3.

  B. Install an AWS Storage Gateway file gateway hardware appliance on premises to replicate the data to Amazon S3.

  C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate the data to Amazon S3.

  D. Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate the data to Amazon S3.

  Correct Answer: B

  https://aws.amazon.com/storagegateway/file/ AWS Storage Gateway Hardware Appliance Hardware Appliance Storage Gateway is available as a hardware appliance, adding to the existing support for VMware ESXi, Microsoft Hyper-V, and Amazon EC2. This means that you can now make use of Storage Gateway in situations where you do not have a virtualized environment, server-class hardware or IT staff with the specialized skills that are needed to manage them. You can order appliances from Amazon.com for delivery to branch offices, warehouses, and "outpost" offices that lack dedicated IT resources. Setup (as you will see in a minute) is quick and easy, and gives you access to three storage solutions: File Gateway A file interface to Amazon S3, accessible via NFS or SMB. The files are stored as S3 objects, allowing you to make use of specialized S3 features such as lifecycle management and cross- region replication. You can trigger AWS Lambda functions, run Amazon Athena queries, and use Amazon Macie to discover and classify sensitive data.

  https://aws.amazon.com/blogs/aws/new-aws-storage-gateway-hardware-appliance/

• Question 1007:

  A company has an ecommerce application that stores data in an on-premises SQL database. The company has decided to migrate this database to AWS. However as part of the migration, the company wants to find a way to attain sub-millisecond responses to common read requests.

  A solutions architect knows that the increase in speed is paramount and that a small percentage of stale data returned in the database reads is acceptable.

  What should the solutions architect recommend?

  A. Build Amazon RDS read replicas.

  B. Build the database as a larger instance type.

  C. Build a database cache using Amazon ElastiCache

  D. Build a database cache using Amazon Elasticsearch Service (Amazon ES)

  Correct Answer: C

• Question 1008:

  A company has an application with a REST-based Interface that allows data to be received in near- real time from a third-party vendor Once received, the application processes and stores the data for further analysis. The application Is

  running on Amazon EC2 instances. The third-party vendor has received many 503 Service Unavailable Errors when sending data to the application. When the data volume spikes, the compute capacity reaches its maximum limit and the

  application is unable to process all requests.

  Which design should a solutions architect recommend to provide a more scalable solution?

  A. Use Amazon Kinesis Data Streams to ingest the data Process the data using AWS Lambda functions.

  B. Use Amazon API Gateway on top of the existing application. Create a usage plan with a quota Iimit for the third-party vendor.

  C. Use Amazon Simple Notification Service (Amazon SNS) to ingest the data Put the EC2 instances in an Auto Scaling group behind an Application Load Balancer.

  D. Repackage the application as a container. Deploy the application using Amazon Elastic Container Service (Amazon ECS) using the EC2 launch type with an Auto Scaling group.

  Correct Answer: A

• Question 1009:

  A company recently released a new type of internet-connected sensor. The company is expecting lo sell thousands of sensors, which are designed to stream high volumes of data each second to a central location. A solutions architect must design a solution that ingests and stores data so that engineering teams can analyze it in near-real time with millisecond responsiveness. Which solution should the solutions architect recommend?

  A. Use an Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.

  B. Use an Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.

  C. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.

  D. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.

  Correct Answer: D

  Main words are: thousands of sensors, stream high volumes of data each second, solution that ingests and stores data, analyze data in near-real time, millisecond responsiveness.

  So solution ask for:

  1) ingest data,

  2) store data.

  Then solution also must be found IN THE WAY engineers can analyze data in near-real time with millisecond responsiveness.

  About ingestion no doubt about kinesis.

  About store data, redshift is a data warehousing service, not a data store service.

  Moreover lambda doesn't work with redshift while it does with dynamodb.

  Analyze meaning is different from analytics, i do a query and analyze the response, no need of a datawarehouse.

  This together with millisecond responsiveness request, carry to dynamodb.

  Redshift supports sub second response. We need millisecond response

  https://aws.amazon.com/blogs/big-data/get-sub-second-query-response-times-with-amazon-redshift-resultcaching/

  https://aws.amazon.com/blogs/big-data/detect-change-points-in-your-event-data-stream-using-amazonkinesis-data-streams-amazon-dynamodb-and-aws-lambda/

• Question 1010:

  A company requires a durable backup storage solution for its on-premises database servers while ensuring on-premises applications maintain access to these backups for quick recovery. The company will use AWS storage services as the destination for these backups A solutions architect is designing a solution with minimal operational overhead Which solution should the solutions architect implement?

  A. Deploy an AWS Storage Gateway file gateway on-premises and associate it with an Amazon S3 bucket

  B. Back up the databases to an AWS Storage Gateway volume gateway and access it using the Amazon S3 API.

  C. Transfer the database backup files to an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance.

  D. Back up the database directly to an AWS Snowball device and use lifecycle rules to move the data to Amazon S3 Glacier Deep Archive.

  Correct Answer: A

  Network Load Balancer overview

  A Network Load Balancer functions at the fourth layer of the Open Systems Interconnection (OSI) model. It can handle millions of requests per second. After the load balancer receives a connection request, it selects a target from the target group for the default rule. It attempts to open a TCP connection to the selected target on the port specified in the listener configuration. When you enable an Availability Zone for the load balancer, Elastic Load Balancing creates a load balancer node in the Availability Zone. By default, each load balancer node distributes traffic across the registered targets in its Availability Zone only. If you enable cross-zone load balancing, each load balancer node distributes traffic across the registered targets in all enabled Availability Zones. For more information, see Availability Zones. If you enable multiple Availability Zones for your load balancer and ensure that each target group has at least one target in each enabled Availability Zone, this increases the fault tolerance of your applications. For example, if one or more target groups does not have a healthy target in an Availability Zone, we remove the IP address for the corresponding subnet from DNS, but the load balancer nodes in the other Availability Zones are still available to route traffic. If a client doesn't honor the time-to-live (TTL) and sends requests to the IP address after it is removed from DNS, the requests fail.

  For TCP traffic, the load balancer selects a target using a flow hash algorithm based on the protocol, source IP address, source port, destination IP address, destination port, and TCP sequence number. The TCP connections from a client have different source ports and sequence numbers, and can be routed to different targets. Each individual TCP connection is routed to a single target for the life of the connection. For UDP traffic, the load balancer selects a target using a flow hash algorithm based on the protocol, source IP address, source port, destination IP address, and destination port. A UDP flow has the same source and destination, so it is consistently routed to a single target throughout its lifetime. Different UDP flows have different source IP addresses and ports, so they can be routed to different targets. An Auto Scaling group contains a collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management. An Auto Scaling group also enables you to use Amazon EC2 Auto Scaling features such as health check replacements and scaling policies.

  Both maintaining the number of instances in an Auto Scaling group and automatic scaling are the core functionality of the Amazon EC2 Auto Scaling service. The size of an Auto Scaling group depends on the number of instances that you set as the desired capacity. You can adjust its size to meet demand, either manually or by using automatic scaling. An Auto Scaling group starts by launching enough instances to meet its desired capacity. It maintains this number of instances by performing periodic health checks on the instances in the group. The Auto Scaling group continues to maintain a fixed number of instances even if an instance becomes unhealthy. If an instance becomes unhealthy, the group terminates the unhealthy instance and launches another instance to replace it.

  https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html https://docs.aws.amazon.com/autoscaling/ec2/userguide/AutoScalingGroup.html