Amazon Amazon Certifications SAA-C02 Questions & Answers

• Question 1051:

  A company built a food ordering application that captures user data and stores it for future analysis. The application's static front end is deployed on an Amazon EC? instance. The front-end application sends the requests to the backend

  application running on separate EC2 instance. The backend application then stores the data in Amazon RDS.

  What should a solutions architect do to decouple the architecture and make it scalable?

  A. Use Amazon S3 to serve the front-end application, which sends requests to Amazon EC2 to execute the backend application. The backend application will process and store the data in Amazon RDS

  B. Use Amazon S3 to serve the front-end application and write requests to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon EC2 instances to the HTTP/HTTPS endpoint o( the topic, and process and store the data in Amazon RDS

  C. Use an EC2 instance lo serve the front end and write requests to an Amazon SQS queue Place the backend Instance in an Auto Scaling group, and scale based on the queue depth to process and store the data in Amazon RDS.

  D. Use Amazon S3 to serve the static front-end application and send requests lo Amazon API Gateway which writes the requests to an Amazon SQS queue Place the backend instances in an Auto Scaling group, and scale based on the queue depth to process and store the data in Amazon RDS

  Correct Answer: D

• Question 1052:

  A company has a custom application running on an Amazon EC2 instance that:

  1.

  Reads a large amount of data from Amazon S3

  2.

  Performs a multi-stage analysis.

  3.

  Writes the results to Amazon DynamoDB.

  The application writes a significant number of large, temporary files during the multi-stage analysis. The process performance depends on the temporary storage performance. What would be the fastest storage option for holding the temporary files?

  A. Multiple Amazon S3 buckets with Transfer Acceleration for storage

  B. Multiple Amazon EBS drives with Provisioned IOPS and EBS optimization.

  C. Multiple Amazon EFS volumes using the Network File System version 4.1 (NFSv4.1) protocol.

  D. Multiple instance store volumes with software RAID 0.

  Correct Answer: A

• Question 1053:

  A start-up company has a web application based in the us-east-1 Region with multiple Amazon EC2 instances running behind an Application Load Balancer across multiple Availability Zones As the company's user base grows in the us-west1 Region, it needs 3 solution with low latency and high availability.

  What should a solutions architect do to accomplish this?

  A. Provision EC2 instances in us-west-1. Switch me Application Load Balancer to a Network Load Balancer to achieve cross-Region load balancing.

  B. Provision EC2 instances and an Application Load Balancer in us-west-1 Make the load balancer distribute the traffic based on the location of the request

  C. Provision EC2 instances and configure an Application Load Balancer in us-west-1. Create an accelerator in AWS Global Accelerator that uses an endpoint group that includes the load balancer endpoints in both Regions.

  D. Provision EC2 Instances and configure an Application Load Balancer in us-wesl-1 Configure Amazon Route 53 with a weighted routing policy. Create alias records in Route 53 that point to the Application Load Balancer

  Correct Answer: C

  Register endpoints for endpoint groups: You register one or more regional resources, such as Application Load Balancers, Network Load Balancers, EC2 Instances, or Elastic IP addresses, in each endpoint group.

  Then you can set weights to choose how much traffic is routed to each endpoint.

  Endpoints in AWS Global Accelerator can be Network Load Balancers, Application Load Balancers,Amazon EC2 instances, or Elastic IP addresses. A static IP address serves as a single point of contact for clients, and Global Accelerator

  then distributes incoming traffic across healthy endpoints. Global Accelerator directs traffic to endpoints by using the port (or port range) that you specify for the listener that the endpoint group for the endpoint belongs to.

  Each endpoint group can have multiple endpoints. You can add each endpoint to multiple endpoint groups, but the endpoint groups must be associated with different listeners.

  €™t have any healthy endpoints to route traffic

  ג

  Global Accelerator continually monitors the health of all endpoints that are included in an endpoint group. It routes traffic only to the active endpoints that are healthy. If Global Accelerator doesn

  to, it routes traffic to all endpoints.

  Reference: https://docs.aws.amazon.com/global-accelerator/latest/dg/about-endpoints.html https://aws.amazon.com/global-accelerator/faqs/

• Question 1054:

  A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data in Amazon RDS MySQL Multi-AZ DB instances The EC2 instances are in public subnets, and the RDS DB instances are in private subnets. The security team has mandated that the DB instances be secured against web-based attacks.

  What should a solutions architect recommend?

  A. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Configure the EC2 instance iptables rules to drop suspicious web traffic Create a security group for the DB instances Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.

  B. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Move DB instances to the same subnets that EC2 instances are located in. Create a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances

  C. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Create a security group for the web application servers and a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the web application server security group.

  D. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Configure the Auto Scaling group lo automatically create new DB instances under heavy traffic Create a security group for the RDS DB instances. Configure the RDS security group to only allow port 3306 inbound

  Correct Answer: C

• Question 1055:

  A company Is launching an ecommerce website on AWS. This website is built with a three-tier architecture that includes a MySQL database In a Multi-AZ deployment of Amazon Aurora MySQL. The website application must be highly

  available and will initially be launched in an AWS Region with three Availability Zones The application produces a metric that describes the load the application experiences.

  Which solution meets these requirements?

  A. Configure an Application Load Balancer (ALB( with Amazon EC2 Auto Scaling behind the ALB with scheduled scaling

  B. Configure an Application Load Balancer (ALB) and Amazon EC2 Auto Scaling behind the ALB with a simple scaling policy.

  C. Configure a Network Load Balancer (NLB) and launch a Spot Fleet with Amazon EC2 Auto Scaling behind the NL8.

  D. Configure an Application Load Balancer (ALB) and Amazon EC2 Auto Scaling behind the ALB with a target tracking scaling policy.

  Correct Answer: B

• Question 1056:

  A solutions architect needs to design a managed storage solution for a company's application that includes high-performance machine learning. This application runs on AWS Fargate. and the connected storage needs to have concurrent access to files and deliver high performance.

  Which storage option should the solutions architect recommend?

  A. Create an Amazon S3 bucket for the application and establish an IAM role for Fargate to communicate with Amazon S3.

  B. Create an Amazon FSx for Lustre file share and establish an IAM role that allows Fargate to communicate with FSx for Lustre

  C. Create an Amazon Elastic File System (Amazon EFS> file share and establish an IAM role that allows Fargate to communicate with Amazon EFS.

  D. Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an IAM role that allows Fargate to communicate with Amazon EBS.

  Correct Answer: B

• Question 1057:

  A website runs a web application that receives a burst of traffic each day at noon. The users upload new pictures and content daily, but have been complaining of timeouts. The architecture uses Amazon EC2 Auto Seating groups, and the custom application consistently takes 1 minute to initiate upon boot up before responding to user requests

  How should a solutions architect redesign the architecture to better respond to changing traffic?

  A. Configure a Network Load Balancer with a slow start configuration.

  B. Configure AWS ElastiCache for Redis to offload direct requests to the servers

  C. Configure an Auto Scaling step scaling policy with an instance warmup condition.

  D. Configure Amazon CloudFront to use an Application Load Balancer as the origin.

  Correct Answer: C

  https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-simple-step.html#as-step-scaling-warmup

  "If you are creating a step policy, you can specify the number of seconds that it takes for a newly launched instance to warm up. Until its specified warm-up time has expired, an instance is not counted toward the aggregated metrics of the Auto Scaling group. Using the example in the Step Adjustments section, suppose that the metric gets to 60, and then it gets to 62 while the new instance is still warming up. The current capacity is still 10 instances, so 1 instance is added (10 percent of 10 instances). However, the desired capacity of the group is already 11 instances, so the scaling policy does not increase the desired capacity further. If the metric gets to 70 while the new instance is still warming up, we should add 3 instances (30 percent of 10 instances). However, the desired capacity of the group is already 11, so we add only 2 instances, for a new desired capacity of 13 instances"

• Question 1058:

  A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history, the company anticipates a spike in traffic during a holiday each year. A solutions

  architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity lo minimize any performance impact on application users.

  Which solution will meet these requirements?

  A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%.

  B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand.

  C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period.

  D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there ate autoscaling:EC2_INSTANCE_LAUNCH events.

  Correct Answer: B

• Question 1059:

  A company is planning to use Amazon S3 to store images uploaded by its users. The images must be encrypted at rest in Amazon S3. The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys.

  What should a solutions architect use to accomplish this?

  A. Server-Side Encryption with keys stored in an S3 bucket

  B. Server-Side Encryption with Customer-Provided Keys (SSE-C)

  C. Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)

  D. Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)

  Correct Answer: D

• Question 1060:

  A web application runs on Amazon EC2 instances behind an Application Load Balancer The application allows users to create custom reports of historical weather data Generating a report can take up to 5 minutes. These long-running requests use many of the available incoming connections, making the system unresponsive to other users How can a solutions architect make the system more responsive?

  A. Use Amazon SQS with AWS Lambda to generate reports

  B. Increase the Idle timeout on the Application Load Balancer to 5 minutes.

  C. Update the client-side application code to increase its request timeout to 5 minutes.

  D. Publish the reports to Amazon S3 and use Amazon CloudFront for downloading lo the user.

  Correct Answer: A