An application tunning on AWS Lambda requires an API key to access a third-party service. The key must be stored securely with audited access to the Lambda function only. What is the MOST secure way to store the key?
A. As an object in Amazon S3.A company is running its application in a single region on Amazon EC2 with Amazon Elastic Block Store (Amazon EBS) and S3 as part of the storage design. What should be done to reduce data transfer costs?
A. Create a copy of the compute environment in another AWS RegionA company serves a multilingual website from a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB) This architecture is currently running in the us-west-l Region but is exhibiting high request latency for users located in
other parts of the world
The website needs to serve requests quickly and efficiently regardless of a user's location However, the company does not want to recreate the existing architecture across multiple Regions.
How should a solutions architect accomplish this?
A. Replace the existing architecture with a website served from an Amazon S3 bucket. Configure an Amazon CloudFront distribution with the S3 bucket as the originA company hosts an application on an Amazon EC2 instance that requires a maximum of 200 GB storage space. The application is used infrequently, with peaks during mornings and evenings. Disk I/O varies, but peaks at 3,000 IOPS. The
chief financial officer of the company is concerned about costs and has asked a solutions architect to recommend the most cost-effective storage option that does not sacrifice performance.
Which solution should the solutions architect recommend?
A. Amazon EBS Cold HDD (sc1)A company is deploying a production portal application on AWS. The database tier has structured data
The company requires a solution that is easily manageable and highly available How can these requirements be met?
A. Deploy the database on multiple Amazon EC2 instances backed by Amazon Elastic Block Store (Amazon EBS) across multiple Availability Zones.A company is running an application on Amazon EC2 instances hosted in a private subnet of a VPC . The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB) The EC2 instances use a NAT gateway for outbound internet access However the EC2 instances are not able to connect to the public internet to download software updates.
What are the possible root causes of this issue? (Select TWO )
A. The ELB is not configured with a proper health checkAfter reviewing the cost optimization checks in AWS Trusted Advisor, a team finds that it has 10,000 Amazon Elastic Block Store (Amazon EBS) snapshots in its account that are more than 30 days old. When the team determines that it
needs to implement better governance for the lifecycle of its resources.
Which actions should the team take to automate the lifecycle management of the EBS snapshots with the LEAST effort? (Select TWO )
A. Create and schedule a backup plan with AWS BackupA company is running several business applications in three separate VPCs within the us- east-1 Region. The applications must be able to communicate between VPCs. The applications also must be able to consistently send hundreds of
gigabytes of data each day to a latency-sensitive application that runs in a single on-premises data center.
A solutions architect needs to design a network connectivity solution that maximizes cost- effectiveness.
Which solution meets these requirements?
A. Configure three AWS Site-to-Site VPN connections from the data center to AWS. Establish connectivity by configuring one VPN connection for each VPC.A doctor's office is moving all of its patient data to the AWS Cloud The office needs to retain all the data indefinitely, but the data is rarely accessed after a year. The data must be immediately available during the first year However, to minimize cost, the office is willing to wait a day for data that is more than 1 year old to become available.
Which combination of actions should a solutions architect take to meet these requirements MOST cost-effectively? (Select TWO )
A. Create an Amazon S3 Lifecycle transition rule to move the data to S3 Glacier after a yearA solutions architect is designing a two-tier web application The application consists of a public- facing web tier hosted on Amazon EC2 in public subnets The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet Security is a high priority for the company How should security groups be configured in this situation? (Select TWO )
A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0 0 0 0/0Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.