Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :May 13, 2025

Amazon Amazon Certifications SAA-C02 Questions & Answers

  • Question 1061:

    A company hosts its application using Amazon Elastic Container Service (Amazon ECS) and wants to ensure high availability. The company wants to be able (o deploy updates to its application even if nodes in one Availability Zone are not

    accessible.

    The expected request volume for the application is 100 requests per second, and each container task is able to serve at least 60 requests pet second The company set up Amazon ECS with a rolling update deployment type with the minimum

    healthy percent parameter set to 50% and the maximum percent set lo 100%.

    Which configuration of tasks and Availability Zones meets these requirements?

    A. Deploy the application across two Availability Zones, with one task in each Availability Zone

    B. Deploy the application across two Availability Zones, with two tasks in each Availability Zone.

    C. Deploy the application across three Availability Zones, with one task in each Availability Zone.

    D. Deploy the application across three Availability Zones, with two tasks in each Availability Zone.

  • Question 1062:

    A company has a legacy application that processes data in two parts. The second part of the process takes longer than the first, so the company has decided to rewrite the application as two microservices running on Amazon ECS that can scale independently How should a solutions architect integrate the microservices?

    A. Implement code in microservice 1 to send data to an Amazon S3 bucket. Use S3 event notifications to invoke microservice 2

    B. Implement code in microservice 1 to publish data to an Amazon SNS topic. Implement code In microservice 2 to subscribe to this topic.

    C. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose. Implement code in microservice 2 to read from Kinesis Data Firehose.

    D. Implement code in microservice 1 to send data to an Amazon SQS queue. Implement code in microservice 2 to process messages from the queue.

  • Question 1063:

    A solutions architect needs to design a resilient solution for Windows users' home directories. The solution must provide fault tolerance, file-level backup and recovery, and access control, based upon the company's Active Directory. Which storage solution meets these requirements?

    A. Configure Amazon S3 to store the users' home directories. Join Amazon S3 to Active Directory.

    B. Configure a Multi-AZ file system with Amazon FSx for Windows File Server Join Amazon FSx to Active Directory.

    C. Configure Amazon Elastic File System (Amazon EFS) for the users' home directories. Configure AWS Single Sign-On with Active Directory.

    D. Configure Amazon Elastic Block Store (Amazon EBS) to store the users' home directories Configure AWS Single Sign-On with Active Directory.

  • Question 1064:

    A company Is migrating lo the AWS Cloud. A file server is the first workload to migrate. Users must be able to access the file share using the Server Message Block (SMB) protocol. Which AWS managed service meets these requirements?

    A. Amazon EBS

    B. Amazon EC2

    C. Amazon FSx

    D. Amazon S3

  • Question 1065:

    A company runs an application on an Amazon EC2 instance Backed by Amazon Elastic Block Store (Amazon EBS). The instance needs to be available for 12 hours daily. The company wants to save costs by making the instance unavailable outside the window required for the application However the contents of the instance's memory must be preserved whenever the instance is unavailable.

    What should a solutions architect do lo meet this requirement?

    A. Stop the instance outside the application's availability window. Start up the Instance again when required.

    B. Hibernate tie instance outside the application's availability window. Start up the instance again when required.

    C. Use Auto Scaling to scale down the instance outside the application's availability window. Scale up the instance when required.

    D. Terminate the instance outside the application's availability window Launch the instance by using a preconfigured Amazon Machine Image (AMI) when required

  • Question 1066:

    A solutions architect is creating a new VPC design. There are two public subnet for the load balancer, two private subnets for web servers, and two private subnets for MySQL. The web serves use only HTTPS. The solutions architect has

    already created a security group for the load Balancer allowing port 443 from 0.0 0.0/0. Company policy requires that each resource has the least access required to still be able to perform its tasks.

    Which additional configuration strategy should the solution architect use to meet these requirements?

    A. Create a security group far the web servers and allow port 443 from 0.0.0.070. Create a security group tor the MySQL serve's aid allow port 3306 from the web servers security group.

    B. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group

    C. Create a security group for the web servers and allow port 443 from the load balancer. Create a security group tor the MySQL servers and allow port 3306 from the web sewers security group

    D. Create a network ACL for the web servers and allow port 443 from the web balancer. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.

  • Question 1067:

    A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file. The configuration file is stored as plaintext on the root device volume of the team's Amazon EC2 instance. When the team's application needs to reach the database, it reads the file and loads the credentials into the code. The team has modified the permissions of the configuration file so that only the application can read its content A solutions architect must design a more secure solution.

    What should the solutions architect do to meet this requirement?

    A. Store the configuration file in Amazon S3. Grant the application access to read the configuration file.

    B. Create an IAM role with permission to access the database Attach this IAM role to the EC2 instance.

    C. Enable SSL connections on the database instance. Alter the database user to require SSL when logging in.

    D. Move the configuration file to an EC2 instance store, and create an Amazon Machine Image (AMI) of the instance. Launch new instances from this AMI.

  • Question 1068:

    A company is building its web application using containers on AWS. The company requires three instances of the web application to run at all times. The application must be able to scale to meet increases in demand. Management is extremely sensitive to cost but agrees that the application should be highly available.

    What should a solutions architect recommend?

    A. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Fargate launch type.Create a task definition for the web application. Create an ECS service with a desired count of three tasks.

    B. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Amazon EC2 launch type with three container instances in one Availability Zone. Create a task definition for the web application. Place one task for each container instance.

    C. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Fargate launch type with one container instance in three different Availability Zones. Create a task definition for the web application. Create an ECS service with a desired count of three tasks.

    D. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Amazon EC2 launch type with one container instance in two different Availability Zones. Create a task definition for the web application. Place two tasks on one container instance and one task on the remaining container instance.

  • Question 1069:

    A company uses on-premises servers to host its applications. The company is running out of storage capacity. The applications use both block storage and NFS storage. The company needs a high- performing solution that supports local caching without re-architecting its existing applications.

    Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

    A. Mount Amazon S3 as a file system to the on-premises servers.

    B. Deploy an AWS Storage Gateway file gateway to replace NFS storage

    C. Deploy AWS Snowball Edge to provision NFS mounts to on-premises servers.

    D. Deploy an AWS Storage Gateway volume gateway to replace the block storage.

    E. Deploy Amazon Elastic Fife System (Amazon EFS) volumes and mount them to on-premises servers.

  • Question 1070:

    A solutions architect is redesigning a monolithic application to be a loosely coupled application composed of two microservices: Microservice A and Microservice B Microservice A places messages in a mam Amazon Simple Queue Service (Amazon SQS) queue for Microservice B to consume When Microservice B fails to process a message after four retries, the message needs to be removed from the queue and stored for further investigation.

    What should the solutions architect do to meet these requirements?

    A. Create an SQS dead-letter queue Microservice B adds failed messages to that queue after it receives and fails to process the message four times.

    B. Create an SQS dead-letter queue Configure the main SQS queue to deliver messages to the dead- letter queue after the message has been received four times.

    C. Create an SQS queue for failed messages Microservice A adds failed messages to that queue after Microservice B receives and fails to process the message four times.

    D. Create an SQS queue for failed messages. Configure the SQS queue for failed messages to pull messages from the main SQS queue after the original message has been received four times.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.