Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 151:

  A solutions architect is implementing a document review application using an Amazon S3 bucket for storage The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download, modify, and upload documents Which combination of actions should be taken to meet these requirements'? (Select TWO )

  A. Enable a read-only bucket ACL
  B. Enable versioning on the bucket
  C. Attach an IAM policy to the bucket
  D. Enable MFA Delete on the bucket
  E. Encrypt the bucket using AWS KMS
  B. Enable versioning on the bucket
  D. Enable MFA Delete on the bucket

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html

• Question 152:

  A data science team requires storage for nightly log processing. The size and number of logs is unknown and will persist for 24 hours only What is the MOST cost-effective solution?

  A. Amazon S3 Glacier
  B. Amazon S3 Standard
  C. Amazon S3 intelligent-Tiering
  D. Amazon S3 One Zone-Infrequent Access {S3 One Zone-IA)
  B. Amazon S3 Standard

• Question 153:

  Your company plans to host a large donation website on Amazon Web Sewices (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS. Which sewice should you use?

  A. Amazon RDS with provisioned IOPS up to the anticipated peak write throughput.
  B. Amazon Simple Queue Service (SQS) for capturing the writes and draining the queue to write to the database.
  C. Amazon EIastiCache to store the writes until the writes are committed to the database.
  D. Amazon DynamoDB with provisioned write throughput up to the anticipated peak write throughput.
  B. Amazon Simple Queue Service (SQS) for capturing the writes and draining the queue to write to the database.

• Question 154:

  A company has developed a microservices application It uses a client-facing API with Amazon API Gateway and multiple internal services hosted on Amazon EC2 instances to process user requests The API is designed to support

  unpredictable surges in traffic, but internal services may become overwhelmed and unresponsive for a period of time during surges A solutions architect needs to design a more reliable solution that reduces errors when internal services

  become unresponsive or unavailable.

  Which solution meets these requirements?

  A. Use AWS Auto Scaling to scale up internal services when there is a surge m traffic.
  B. Use different Availability Zones to host internal services Send a notification to a system administrator when an internal service becomes unresponsive
  C. Use an Elastic Load Balancer to distribute the traffic between internal services Configure Amazon CloudWatch metrics to monitor traffic to internal services
  D. Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive Change the internal services to retrieve the requests from the queue for processing
  D. Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive Change the internal services to retrieve the requests from the queue for processing

  ---

  Explanation/Reference:

  SQS -> API Gateway as the single point of entry -> multiple internal services Because "reduces errors when internal services become unresponsive or unavailable." means it's ok when they are unavailable, just need not to loose requests

• Question 155:

  A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods for IAM user passwords What should the solutions architect do to accomplish this?

  A. Set an overall password policy for the entire AWS account
  B. Set a password policy for each IAM user in the AWS account.
  C. Use third-party vendor software to set password requirements,
  D. Attach an Amazon CloudWatch rule to the Create_newuser event to set the password with the appropriate requirements.
  A. Set an overall password policy for the entire AWS account

• Question 156:

  A company has three AWS accounts Management Development and Production. These accounts use AWS services only in the us-east-1 Region All accounts have a VPC with VPC Flow Logs configured to publish data to an Amazon S3 bucket in each separate account For compliance reasons the company needs an ongoing method to aggregate all the VPC flow logs across all accounts into one destination S3 bucket in the Management account.

  What should a solutions architect do to meet these requirements with the LEAST operational overhead?

  A. Add S3 Same-Region Replication rules in each S3 bucket that stores VPC flow logs to replicate objects to the destination S3 bucket Configure the destination S3 bucket to allow objects to be received from the S3 buckets in other accounts
  B. Set up an 1AM user in the Management account Grant permissions to the 1AM user to access the S3 buckets that contain the VPC flow logs Run the aws s3 sync command in the AWS CLl to copy the objects to the destination S3 bucket
  C. Use an S3 inventory report to specify which objects in the S3 buckets to copy Perform an S3 batch operation to copy the objects into the destination S3 bucket in the Management account with a single request.
  D. Create an AWS Lambda function in the Management account Grant S3 GET permissions on the source S3 buckets Grant S3 PUT permissions on the destination S3 bucket Configure the function to invoke when objects are loaded in the source S3 buckets
  A. Add S3 Same-Region Replication rules in each S3 bucket that stores VPC flow logs to replicate objects to the destination S3 bucket Configure the destination S3 bucket to allow objects to be received from the S3 buckets in other accounts

• Question 157:

  A company has an on-premises business application that generates hundreds of files each day. These files are stored on an SMB file share and require a low-latency connection to the application servers. A new company policy states all

  application-generated files must be copied to AWS. There is already a VPN connection to AWS.

  The application development team does not have time to make the necessary code modifications to move the application to AWS.

  Which service should a solutions architect recommend to allow the application to copy files to AWS?

  A. Amazon Elastic File System (Amazon EFS)
  B. Amazon FSx for Windows File Server
  C. AWS Snowball
  D. AWS Storage Gateway
  B. Amazon FSx for Windows File Server

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/storage/accessing-smb-file-shares-remotely-with-amazon-fsx-for-windows-file-server/

• Question 158:

  A company wants lo share data that is collected from sell-driving cars with the automobile community. The data will be made available (rom within an Amazon S3 bucket. The company wants to minimize its cost of making this data available to other AWS accounts.

  What should a solutions architect do to accomplish this goal?

  A. Create an S3 VPC endpoint for the bucket.
  B. Configure the S3 bucket to be a Requester Pays bucket.
  C. Create an Amazon CloudFront distribution in front of the S3 bucket.
  D. Require that the fries be accessible only with the use of the BitTorrent protocol.
  A. Create an S3 VPC endpoint for the bucket.

• Question 159:

  A company maintains about 300 TB m Amazon S3 Standard storage month after month. The S3 objects are each typically around 50 GB m size and are frequently replaced with multipart uploads by their global application. The number and size of S3 objects remain constant but the company's S3 storage costs are increasing each month.

  How should a solutions architect reduce costs in this situation?

  A. Switch from multipart uploads to Amazon S3 Transfer Acceleration
  B. Enable an S3 Lifecycle policy that deletes incomplete multipart uploads
  C. Configure S3 inventory to prevent objects from being archived too quickly
  D. Configure Amazon CloudFront to reduce the number of objects stored in Amazon S3
  B. Enable an S3 Lifecycle policy that deletes incomplete multipart uploads

  ---

  Explanation/Reference:

• Question 160:

  A company is planning to use an Amazon DynamoDB table for data storage. The company is concerned about cost optimization. The table will not be used on most mornings in the evenings, the read and write traffic will often be

  unpredictable When traffic spikes occur they will happen very quickly.

  What should a solutions architect recommend?

  A. Create a DynamoDB table in on-demand capacity mode.
  B. Create a DynamoDB table with a global secondary Index
  C. Create a DynamoDB table with provisioned capacity and auto scaling.
  D. Create a DynamoDB table in provisioned capacity mode, and configure it as a global table
  A. Create a DynamoDB table in on-demand capacity mode.