SAA-C02 Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon SAA-C02 Online Questions & Answers

  • Question 121:

    A company is implementing a shared storage solution for a media application that is hosted m the AWS Cloud The company needs the ability to use SMB clients to access data The solution must he fully managed Which AWS solution meets these requirements?

    A. Create an AWS Storage Gateway volume gateway. Create a file share that uses the required client protocol Connect the application server to the tile share.
    B. Create an AWS Storage Gateway tape gateway Configure (apes to use Amazon S3 Connect the application server lo the tape gateway
    C. Create an Amazon EC2 Windows instance Install and configure a Windows file share role on the instance. Connect the application server to the file share.
    D. Create an Amazon FSx for Windows File Server tile system Attach the fie system to the origin server. Connect the application server to the tile system

  • Question 122:

    A company has an Amazon S3 bucket that contains mission-critical data. The company wants to ensure this data is protected from accidental deletion. The data should still be accessible, and a user should be able to delete the data intentionally.

    Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

    A. Enable versioning on the S3 bucket.
    B. Enable MFA Delete on the S3 bucket.
    C. Create a bucket policy on the S3 bucket.
    D. Enable default encryption on the S3 bucket.
    E. Create a lifecycle policy for the objects in the S3 bucket.

  • Question 123:

    A company needs a backup strategy for its three-tier stateless web application The web application runs on Amazon EC2 instances in an Auto Scaling group with a dynamic scaling policy that is configured to respond to scaling events The

    database tier runs on Amazon RDS for PostgreSQL The web application does not require temporary local storage on the EC2 instances The company's recovery point objective (RPO) is 2 hours.

    The backup strategy must maximize scalability and optimize resource utilization for this environment.

    Which solution will meet these requirements?

    A. Take snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances and database every 2 hours to meet the RPO
    B. Configure a snapshot lifecycle policy to take Amazon Elastic Block Store (Amazon EBS) snapshots Enable automated backups in Amazon RDS to meet the RPO
    C. Retain the latest Amazon Machine Images (AMIs) of the web and application tiers Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO
    D. Take snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances every 2 hours Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO

  • Question 124:

    A company hosts its multi-tier public web application in the AWS Cloud. The web application runs on Amazon EC2 instances and its database runs on Amazon RDS. The company is anticipating a large increase in sales during an upcoming holiday weekend. A solutions architect needs to build a solution to analyze the performance of the web application with a granularity of no more than 2 minutes.

    What should the solutions architect do to meet this requirement?

    A. Send Amazon CloudWatch logs to Amazon Redshift Use Amazon QuickSight to perform further analysis
    B. Enable detailed monitoring on all EC2 instances Use Amazon CloudWatch metrics to perform further analysis
    C. Create an AWS Lambda function to fetch EC2 logs from Amazon CloudWatch Logs Use Amazon CloudWatch metrics to perform further analysis
    D. Send EC2 logs to Amazon S3 Use Amazon Redshift to fetch logs from the S3 bucket to process raw data for further analysis with Amazon QuickSight.

  • Question 125:

    A bicycle sharing company is developing a multi-tier architecture to track the location of its bicycles during peak operating hours. The company wants to use these data points in its existing analytics platform. A solutions architect must determine the most viable multi-tier option to support this architecture. The data points must be accessible from the REST API. Which action meets these requirements for storing and retrieving location data?

    A. Use Amazon Athena with Amazon S3.
    B. Use Amazon API Gateway with AWS Lambda.
    C. Use Amazon QuickSight with Amazon Redshift.
    D. Use Amazon API Gateway with Amazon Kinesis Data Analytics.

  • Question 126:

    A company is preparing to launch a public-facing web application in the AWS Cloud The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer (ELB). A third party service is used for the DNS. The

    company's solutions architect must recommend a solution to detect and protect against large scale DDoS attacks.

    Which solution meets these requirements?

    A. Enable Amazon GuardDuty on the account
    B. Enable Amazon Inspector on the EC2 instances
    C. Enable AWS Shield and assign Amazon Route 53 to it.
    D. Enable AWS Shield Advanced and assign the ELB to it

  • Question 127:

    A company has an on-premises application that generates a large amount of time-sensitive data that is backed up to Amazon S3. The application has grown and there are user complaints about internet bandwidth limitations. A solutions

    architect needs to design a long term solution that allows for both timely backups to Amazon S3 and with minimal impact on internet connectivity tor internal users.

    Which solution meets these requirements?

    A. Establish AWS VPN connections and proxy all traffic through a VPC gateway endpoint
    B. Establish a new AWS Direct Connect connection and direct backup traffic through this new connection
    C. Order daily AWS Snowball devices Load the data onto the Snowball devices and return the devices to AWS each day
    D. Submit a support ticket through the AWS Management Console Request the removal of S3 service limits from the account.

  • Question 128:

    A company is designing an application to run in a VPC on AWS The application consists of Amazon EC2 instances that tun in private subnets as part of an Auto Scaling group The application also includes a Network Load Balancer that

    extends across public subnets The application stores data in an Amazon RDS OB instance

    The company has attached a security group that is named "web-servers' to the EC2 instances. The company has attached a security group that is named "database" to the DB Instance.

    How should a solutions architect configure the communication between the EC2 instances and the DB instance?

    A. Configure the "web-servers* security group (o allow access lo the OB instance's current IP addresses Configure the "database" security group to allow access from the current set of IP addresses in use by the EC instances
    B. Configure the "web-servers" security group to allow access to the "database" security group Configure the "database" security group to allow access from the "web-servers" security group
    C. Configure the "web-servers" security group to allow access to the DB instance's current IP addresses Configure the "database" security group to allow access from the Auto Scaling group
    D. Configure the "web servers" security group to allow access to the "database" security group Configure the "database" security group to allow access from the Auto Scaling group

  • Question 129:

    A company is relocating its data center and wants to securely transfer 50 TB of data to AWS within 2 weeks The existing data center has a Site-to-Site VPN connection to AWS that is 90% utilized. Which AWS service should a solutions architect use to meet these requirements?

    A. AWS DataSync with a VPC endpoint
    B. AWS Direct Connect
    C. AWS Snowball Edge Storage Optimized
    D. AWS Storage Gateway

  • Question 130:

    A company's operations teams has an existing Amazon S3 bucket configured to notify an Amazon SQS queue when new object are created within the bucket. The development team also wants to receive events when new objects are

    created. The existing operations team workflow must remain intact.

    Which solution would satisfy these requirements?

    A. Create another SQS queue Update the S3 events in bucket to also update the new queue when a new object is created.
    B. Create a new SQS queue that only allows Amazon S3 to access the queue, Update Amazon S3 update this queue when a new object is created
    C. Create an Amazon SNS topic and SQS queue for the Update. Update the bucket to send events to the new topic. Updates both queues to poll Amazon SNS.
    D. Create an Amazon SNS topic and SQS queue for the bucket updates. Update the bucket to send events to the new topic Add subscription for both queue in the topic.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.