1. Home
  2. Amazon
  3. SAA-C02

Amazon SAA-C02 Online Practice Questions and Exam Preparation

SAA-C02 Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon SAA-C02 Online Questions & Answers

  • Question 141:

    A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ instance. The company wants a secure method for the web servers to connect to thedatabase while meeting a security requirement to rotate user credentials frequently. A company has several web servers that need to frequently access a common Amazon ROS MySQL Muto-AZ DB instance The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently

    Which solution meets these requirements^

    A. Store the database user credentials in AWS Secrets Manager Grant the necessary 1AM permissions to allow the web servers to access AWS Secrets Manager
    B. Store the database user credentials m AWS Systems Manager OpsCenter Grant the necessary 1AM permissions to allow the web servers to access OpsCenter
    C. Store the database user credentials in a secure Amazon S3 bucket Grant the necessary 1AM permissions to allow the web servers to retrieve credentials and access the database
    D. Store the database user credentials in fries encrypted with AWS Key Management Service (AWS KMS) on the web server file system The web server should be able to decrypt the files and access the database

  • Question 142:

    A company has five organizational units (OUS) as part of its organization in AWS Organization. Each OU correlate to the five business that the company owns. The company research and development RandD business is separating from the company and will need its own organization. A solutions architect creates a separate new management account for this purpose.

    A. Have the RandD AWS account be part of both organizations during the transition.
    B. Invite the RandD AWS account to be part of the new organization after the RandD AWS account has left the prior organization.
    C. Create a new RandD AWS account in the new organization. Migrate resources from the period RandD AWS account to thee new RandD AWS account
    D. Have the RandD AWS account into the now organisation. Make the now management account a member of the prior organisation

  • Question 143:

    A solutions architect must transfer 750 TB of data from an on-premises network-attached file system to Amazon S3 Glacier. The migration must not saturate the on-premises 10 Mbps internet connection. Which solution will meet these requirements?

    A. Create an AWS Site-to-Site VPN tunnel to an S3 bucket Transfer the files directly by using the AWS CLI.
    B. Order 10 AWS Snowball Edge Storage Optimized devices, and select an S3 Glacier vault as the destination.
    C. Mount the network-attached file system to an S3 bucket, and copy the files directly. Create an S3 Lifecycle policy to transition the S3 objects to S3 Glacier.
    D. Order 10 AWS Snowball Edge Storage Optimized devices, and select an S3 bucket as the destination. Create an S3 Lifecycle policy to transition the S3 objects to S3 Glacier.

  • Question 144:

    A company is designing a new service that will run on Amazon EC2 instance behind an Elastic Load Balancer. However, many of the web service clients can only reach IP addresses whitelisted on their firewalls. What should a solution architect recommend to meet the clients' needs? What should a solution architect recommend to meet the clients' needs?

    A. A Network Load Balancer with an associated Elastic IP address.
    B. An Application Load Balancer with an a associated Elastic IP address
    C. An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address
    D. An EC2 instance with a public IP address running as a proxy in front of the load balancer

  • Question 145:

    A company is running an online transaction processing (OLTP) workload on AWS. This workload uses an unencrypted Amazon RDS DB instance in a Multi-AZ deployment. Daily database snapshots are taken from this instance.

    What should a solutions architect do to ensure the database and snapshots are always encrypted moving forward?

    A. Encrypt a copy of the latest DB snapshot. Replace existing DB instance by restoring the encrypted snapshot.
    B. Create a new encrypted Amazon Elastic Block Store (Amazon EBS) volume and copy the snapshots lo it. Enable encryption on the DB instance.
    C. Copy the snapshots and enable encryption using AWS Key Management Service (AWS KMS).Restore encrypted snapshot to an existing DB instance.
    D. Copy the snapshots to an Amazon S3 bucket that is encrypted using server-side encryption with AWS Key Management Service (AWS KMS) managed keys (SSE-KMS).

  • Question 146:

    A company hosts a training site on a fleet of Amazon EC2 instances. The company anticipates that its new course, which consists of dozens of training videos on the site, will be extremely popular when it is released in 1 week. What should a solutions architect do to minimize the anticipated server load?

    A. Store the videos in Amazon ElastiCache for Redis Update the web servers to serve the videos using the Elastic ache API
    B. Store the videos in Amazon Elastic File System (Amazon EFS) Create a user data script for the web servers to mount the EFS volume.
    C. Store the videos in an Amazon S3 bucket Create an Amazon CloudFlight distribution with an origin access identity (OAI) of that S3 bucket Restrict Amazon S3 access to the OAI.
    D. Store the videos in an Amazon S3 bucket. Create an AWS Storage Gateway file gateway to access the S3 bucket Create a user data script for the web servers to mount the file gateway

  • Question 147:

    A solutions architect is designing an architecture for a new application that requires low network latency and high network throughput between Amazon EC2 instances. Which component should be included in the architectural design?

    A. An Auto Scaling group with Spot Instance types.
    B. A placement group using a cluster placement strategy.
    C. A placement group using a partition placement strategy.
    D. An Auto Scaling group with On-Demand instance types.

  • Question 148:

    A company is creating an application that runs on containers in a VPC. The application stores and accesses data m an Amazon S3 bucket. During the development phase the application will store and access 1 TB of data in Amazon S3 each day. The company wants to minimize costs and wants to prevent traffic from traversing the internet whenever possible.

    Which solution will meet these requirements?

    A. Enable S3 Intelligent-Tiering for the S3 bucket.
    B. Enable S3 Transfer Acceleration for the S3 bucket
    C. Create a gateway VPC endpoint for Amazon S3 Associate this endpoint with all route tables in the VPC.
    D. Create an interlace endpoint for Amazon S3 in the VPC Associate this endpoint with all route tables in the VPC.

  • Question 149:

    A company needs to ingested and handle large amounts of streaming data that its application generates. The application runs on Amazon EC2 instances and sends data to Amazon Kinesis Data Streams, which is configured with default settings. Every other day, the application consumes the data and writes the data to an Amazon S3 bucket for business intelligence (BI) processing. The company observes that Amazon S3 is not receiving all the data that the application sends to Kinesis Data Streams.

    What should a solutions architect do to resolve this issue?

    A. Update the Kinesis Data Streams default settings by modifying the data retention period.
    B. Update the application to use the Kinesis Producer Library (KPL) to send the data to Kinesis Data Streams.
    C. Update the number of Kinesis shards to handle the throughput of the data that is sent to Kinesis Data Streams.
    D. Turn on S3 Versioning within the S3 bucket to preserve every version of every object that is ingested in the S3 bucket.

  • Question 150:

    A company needs to move data from an Amazon EC2 instance to an Amazon S3 bucket. The company mutt ensure that no API calls and no data aim routed through public internet routes Only the EC2 instance can have access to upload data to the S3 bucket.

    Which solution will meet these requirements?

    A. Create an interlace VPC endpoinl for Amazon S3 in the subnet where the EC2 instance is located Attach a resource policy to the S3 bucket to only allow the EC2 instance's 1AM rote for access
    B. Create a gateway VPC endpoinl for Amazon S3 in the Availability Zone where the EC2 instance is located Attach appropriate security groups to the endpoint Attach a resource policy to the S3 bucket to only allow the EC2 instance's lAM tote for access
    C. Run the nslookup toot from inside the EC2 instance to obtain the private IP address of the S3 bucket's service API endpoint Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket Attach a resource policy to the S3 bucket to only allow the EC2 instance's AM role for access
    D. Use the AWS provided publicly available ip-ranges |son file to obtam the pnvate IP address of the S3 bucket's service API endpoint Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket Attach a resource policy to the S3 bucket to only allow the EC2 instance's 1AM role for access

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.