Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 311:

  A company has a business-critical application that runs on Amazon bC2 instances. The application stores data m an Amazon DynamoDB table. The company must be able to revert the table to any point within the last 24 hours. Which solution meets these requirements with the LEAST operational overhead?

  A. Configure point-in-time recovery for the fabric
  B. Use AWS Backup for the table
  C. Use an AWS Lambda function to make an on demand backup of the table every hour
  D. Turn on streams on the table to capture a log of all changes to the table in the last 24 hours. Store a copy of the stream in an Amazon S3 bucket
  A. Configure point-in-time recovery for the fabric

• Question 312:

  A solutions architect is creating a new VPC design. There are two public subnet for the load balancer, two private subnets for web servers, and two private subnets for MySQL. The web serves use only HTTPS. The solutions architect has

  already created a security group for the load Balancer allowing port 443 from 0.0 0.0/0. Company policy requires that each resource has the least access required to still be able to perform its tasks.

  Which additional configuration strategy should the solution architect use to meet these requirements?

  A. Create a security group far the web servers and allow port 443 from 0.0.0.070. Create a security group tor the MySQL serve's aid allow port 3306 from the web servers security group.
  B. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group
  C. Create a security group for the web servers and allow port 443 from the load balancer. Create a security group tor the MySQL servers and allow port 3306 from the web sewers security group
  D. Create a network ACL for the web servers and allow port 443 from the web balancer. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.
  C. Create a security group for the web servers and allow port 443 from the load balancer. Create a security group tor the MySQL servers and allow port 3306 from the web sewers security group

• Question 313:

  A company needs to store data in Amazon S3 and must prevent the data from being changed. The company wants new objects that are uploaded to Amazon S3 to remain unchangeable for a nonspecific amount of time until the company decides to modify the objects. Only specific users in the company's AWS account can have the ability to delete the objects. What should a solutions architect do to meet these requirements?

  A. Create an S3 Glacier vault Apply a write-once, read-many (WORM) vault lock policy to the objects
  B. Create an S3 bucket with S3 Object Lock enabled Enable versioning Set a retention period of 100 years Use governance mode as the S3 bucket's default retention mode for new objects
  C. Create an S3 bucket Use AWS CloudTrail to (rack any S3 API events that modify the objects Upon notification, restore the modified objects from any backup versions that the company has
  D. Create an S3 bucket with S3 Object Lock enabled Enable versioning Add a legal hold to the objects Add the s3 PutObjectLegalHold permission to the 1AM policies of users who need to delete the objects
  D. Create an S3 bucket with S3 Object Lock enabled Enable versioning Add a legal hold to the objects Add the s3 PutObjectLegalHold permission to the 1AM policies of users who need to delete the objects

• Question 314:

  The AWS IT infrastructure that AWS provides, complies with the following IT security standards, including:

  A. SOC 1/SSAE 16/ISAE 3402 (formerly SAS 70 Type II), SOC 2 and SOC 3
  B. FISMA, DIACAP, and FedRA|V|P
  C. PCI DSS Level 1, ISO 27001, ITAR and FIPS 140-2
  D. HIPAA, Cloud Security Alliance (CSA) and Motion Picture Association of America (NIPAA)
  E. All of the above
  A. SOC 1/SSAE 16/ISAE 3402 (formerly SAS 70 Type II), SOC 2 and SOC 3
  B. FISMA, DIACAP, and FedRA|V|P
  C. PCI DSS Level 1, ISO 27001, ITAR and FIPS 140-2

• Question 315:

  A company's website receives 50,000 requests each second. The company wants to use multiple applications to analyze the navigation patterns of the website users so that the experience can be personalized. Which AWS services or feature should a solutions architect use to collect page clicks for the website and process them sequentially for each user?

  A. Amazon Kinesis Data Streams
  B. Amazon Simple Queue Service (Amazon SQS) standard queue
  C. Amazon Simple Queue Service (Amazon SQS) FIFO queue
  D. AWS CloudTrail
  A. Amazon Kinesis Data Streams

• Question 316:

  A company is planning to transfer multiple terabytes of data to AWS. The data is collected offline from ships. The company want to run complex transformation before transferring the data. Which AWS service should a solutions architect recommend for this migration?

  A. AWS Snowball
  B. AWS Snowmobile
  C. AWS Snowball Edge Storage Optimize
  D. AWS Snowball Edge Compute Optimize
  D. AWS Snowball Edge Compute Optimize

• Question 317:

  A company is designing a new multi-tier web application that consists of the following components:

  Web and application servers that run on Amazon EC2 instances as part of Auto Scaling groups An Amazon RDS DB instance for data storage

  A solutions architect needs to limit access to the application servers so that only the web servers can access them Which solution will meet these requirements?

  A. Deploy AWS PrivateLink in front of the application servers Configure the network ACL to allow only the web servers to access the application servers
  B. Deploy a VPC endpoint in front of the application servers Configure the security group to allow only the web servers to access the application servers
  C. Deploy a Network Load Balancer with a target group that contains the application servers" Auto Scaling group. Configure the network ACL to allow only the web servers to access the application servers
  D. Deploy an Application Load Balancer with a target group that contains the application servers' Auto Scaling group Configure the security group to allow only the web servers to access the application servers.
  C. Deploy a Network Load Balancer with a target group that contains the application servers" Auto Scaling group. Configure the network ACL to allow only the web servers to access the application servers

• Question 318:

  A three-tier web application processes orders from customers. The web tier consists of Amazon EC2 instances behind an Application Load Balancer, a middle tier of three EC2 instances decoupled from the web tier using Amazon SQS. and an Amazon DynamoDB backend. At peak times, customers who submit orders using the site have to wait much longer than normal to receive confirmations due to lengthy processing times. A solutions architect needs to reduce these processing times.

  Which action will be MOST effective in accomplishing this?

  A. Replace the SQS queue with Amazon Kinesis Data Firehose.
  B. Use Amazon ElastiCache for Redis in front of the DynamoDB backend tier.
  C. Add an Amazon CloudFront distribution to cache the responses for the web tier.
  D. Use Amazon EC2 Auto Scaling to scale out the middle tier instances based on the SQS queue depth.
  C. Add an Amazon CloudFront distribution to cache the responses for the web tier.

  ---

  Explanation/Reference:

• Question 319:

  A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to

  the production DB instance.

  Which solution meets these requirements?

  A. Deploy RDS read replicas to process the business reporting queries.
  B. Scale out the DB instance horizontally by placing it behind an Elastic Load Balancer
  C. Scale up the DB instance to a larger instance type to handle write operations and queries.
  D. Deploy the DB instance in multiple Availability Zones to process the business reporting queries.
  A. Deploy RDS read replicas to process the business reporting queries.

• Question 320:

  A company is using Amazon DynamoDB to stage its product catalog which is 1 GB. Since a product entry on average consists of100 KB of data, and the average traffic is about 250 requests per second, the database administrator has provisioned 3.000 RCUs of read capacity throughput However, some products are very popular and users are experiencing delays or timeouts due to throttling What improvement offers a long-term solution to this problem?

  A. Increase the throughput provisioning to 6.000 read capacity units (RCUs)
  B. Use Amazon DynamoDB Accelerator to maintain the frequently read items
  C. Augment Amazon DynamoDB by storing only the key product attributes, with the details stored on Amazon S3
  D. Change the partition key to consist of a hash of product key and product type instead of just the product key
  B. Use Amazon DynamoDB Accelerator to maintain the frequently read items