Amazon Amazon Certifications SAA-C02 Questions & Answers

• Question 171:

  A company's operations teams has an existing Amazon S3 bucket configured to notify an Amazon SQS queue when new object are created within the bucket. The development team also wants to receive events when new objects are

  created. The existing operations team workflow must remain intact.

  Which solution would satisfy these requirements?

  A. Create another SQS queue Update the S3 events in bucket to also update the new queue when a new object is created.

  B. Create a new SQS queue that only allows Amazon S3 to access the queue, Update Amazon S3 update this queue when a new object is created

  C. Create an Amazon SNS topic and SQS queue for the Update. Update the bucket to send events to the new topic. Updates both queues to poll Amazon SNS.

  D. Create an Amazon SNS topic and SQS queue for the bucket updates. Update the bucket to send events to the new topic Add subscription for both queue in the topic.

  Correct Answer: D

• Question 172:

  A company has a Microsoft Windows-based application that must be migrated to AWS. This application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances. What should a solution architect do to accomplish this?

  A. Configure a volume using Amazon EFS Mount the EPS volume to each Windows Instance

  B. Configure AWS Storage Gateway in Volume Gateway mode Mount the volume to each Windows instance

  C. Configure Amazon FSx for Windows File Server Mount the Amazon FSx volume to each Windows Instance

  D. Configure an Amazon EBS volume with the required size Attach each EC2 instance to the volume Mount the file system within the volume to each Windows instance

  Correct Answer: C

• Question 173:

  A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deploying on Amazon EC2 instances behind an Application Load balancer in an Auto Scaling group. The company needs the ability shift traffic from resources in one region to another.

  What should a solutions architect recommend?

  A. Configure an Amazon Route 53 latency routing policy

  B. Configure an Amazon Route 53 geolocation routing policy

  C. Configure an Amazon Route 53 geoproximity routingpolicy.

  D. Configure an Amazon Route 53 multivalue answer routing policy

  Correct Answer: C

  Geoproximity routing policy ?Use when you want to route traffic based on the location of your resources and, optionally," shift traffic from resources in one location to resources in another". Using "Bias" you can expand or shrink size of the geographic region and shift traffic from one geographic region to another. To optionally change the size of the geographic region from which Route 53 routes traffic to a resource, specify the applicable value for the bias: To expand the size of the geographic region from which Route 53 routes traffic to a resource, specify a positive integer from 1 to 99 for the bias. Route 53 shrinks the size of adjacent regions. To shrink the size of the geographic region from which Route 53 routes traffic to a resource, specify a negative bias of -1 to -99. Route 53 expands the size of adjacent regions.

  https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

• Question 174:

  A public-facing web application queries a database hosted on a Amazon EC2 instance in a private subnet. A large number of queries involve multiple table joins, and the application performance has been degrading due to an increase in complex queries. The application team will be performing updates to improve performance.

  What should a solutions architect recommend to the application team? (Select TWO.)

  A. Cache query data in Amazon SQS

  B. Create a read replica to offload queries

  C. Migrate the database to Amazon Athena

  D. Implement Amazon DynamoDB Accelerator to cache data.

  E. Migrate the database to Amazon RDS

  Correct Answer: BE

• Question 175:

  Application developers have noticed that a production application is very slow when business reporting users run large production reports against the Amazon RDS instance backing the application. the CPU and memory utilization metrics for

  the RDS instance-d not exceed 60% while the reporting queries are running. The business reporting users must be able to generate reports without affecting the applications performance.

  Which action will accomplish this?

  A. Increase the size of the RDS instance

  B. Create a read replica and connect the application to it.

  C. Enable multiple Availability Zones on the RDS instance

  D. Create a read replication and connect the business reports to it.

  Correct Answer: D

• Question 176:

  A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution, but wants to future reduce data transfer costs. The company modify the application's source code.

  What should a solution architect do to reduce costs?

  A. Use Lambda adage to compress the files as they are sent to users.

  B. Enable Amazon S3 Transfer Acceleration to reduce the response times.

  C. Enable caching on the CloudFront distribution to store generated files at the edge.

  D. Use Amazon S3 multipart uploads to move the files to Amazon S3 before returning them to users.

  Correct Answer: C

• Question 177:

  A company has implemented one of its microservices on AWS Lambda that accesses an Amazon DynamoDB table named Books. A solutions architect is design an IAM policy to be attached to the Lambda function's IAM role, giving it access to put, update, and delete items in the Books table. the IAM policy must prevent function from performing any other actions on the Books table or any other.

  Which IAM policy would fulfill these needs and provide the LEAST privileged access?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 178:

  A company collects temperature, humidity, and atmospheric pressure data in cities across multiple continents. The average volume of data collected per site each day is 500 GB. Each site has a high- speed internet connection. The company's weather forecasting applications are based in a single Region and analyze the data daily.

  What is the FASTEST way to aggregate data for all of these global sites?

  A. Enable Amazon S3 Transfer Acceleration on the destination bucket. Use multipart uploads to directly upload site data to the destination bucket.

  B. Upload site data to an Amazon S3 bucket in the closest AWS Region. Use S3 cross-Region replication to copy objects to the destination bucket.

  C. Upload site data to an Amazon S3 bucket in the closest AWS Region. Use S3 cross-Region replication to copy objects to the destination bucket.

  D. Upload the data to an Amazon EC2 instance in the closes Region. Store the data in an Amazon EBS volume. One a day take an EBS snapshot and copy it to the centralize Region. Restore the EBS volume in the centralized Region and run an analysis on the data daily.

  Correct Answer: A

  Step -1 To transfer to S3 from global sites : Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and your Amazon S3 bucket. S3 Transfer Acceleration leverages Amazon CloudFront's globally distributed AWS Edge Locations. Used to accelerate object uploads to S3 over long distances (latency). Transfer acceleration is as secure as a direct upload to S3. Step -2 : When the application analyze/aggregate the data from S3 and then again upload the results

  -Multipart upload http://lavnish.blogspot.com/2017/06/aws-s3-cross-region-replication.html https://aws.amazon.com/s3/transfer-acceleration/

• Question 179:

  A company has multiple AWS accounts, for various departments. One of the departments wants to share an Amazon S3 bucket with all other department. Which solution will require the LEAST amount of effort?

  A. Enable cross-account S3 replication for the bucket

  B. Create a pre signed URL tor the bucket and share it with other departments

  C. Set the S3 bucket policy to allow cross-account access to other departments

  D. Create IAM users for each of the departments and configure a read-only IAM policy

  Correct Answer: C

  https://docs.aws.amazon.com/AmazonS3/latest/dev/example-walkthroughs-managing-access-example2.html

• Question 180:

  A company is using a VPC peering strategy to connect its VPCs in a single Region to allow for cross- communication. A recent increase in account creations and VPCs has made it difficult to maintain the VPC peering strategy, and the company expects to grow to hundreds of VPCs. There are also new requests to create site-to-site VPNs with some of the VPCs. A solutions architect has been tasked with creating a centrally networking setup for multiple accounts, VPNS, and VPNs.

  Which networking solution meets these requirements?

  A. Configure shared VPCs and VPNs and share to each other

  B. Configure a hub-and-spoke and route all traffic through VPC peering.

  C. Configure an AWS Direct Connect between all VPCs and VPNs.

  D. Configure a transit gateway with AWS Transit Gateway and connected all VPCs and VPNs.

  Correct Answer: D