Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 341:

  A solutions architect needs to allow developers to have SSH connectivity to web servers The requirements are as follows

  1.

  Limit access to users originating from the corporate network.

  2.

  Web servers cannot have SSH access directly from the internet.

  3.

  Web servers reside in a private subnet.

  Which combination of steps must the architect complete to meet these requirements? (Select TWO.)

  A. Create a bastion host that authenticates users against the corporate directory
  B. Create a bastion host with security group rules that only allow traffic from the corporate network.
  C. Attach an 1AM role to the bastion host with relevant permissions
  D. Configure the web servers' security group to allow SSH traffic from a bastion host.
  E. Deny all SSH traffic from the corporate network in the inbound network ACL.
  A. Create a bastion host that authenticates users against the corporate directory
  E. Deny all SSH traffic from the corporate network in the inbound network ACL.

• Question 342:

  A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials needs to be removed from the Lambda source code. The credentials must then be securely stored and rotated on a on-going basis to meet security policy requirements.

  What should a solutions architect recommend meet these requirements?

  A. Store the password in AWS CloudHSM Associate the Lambda function with a role that can retrieve the password from CloudHSM given its key ID
  B. Store the password in AWS Secrets Manager . A associate the Lambda function with a role that can retrieve the password from secrets Manager given its secret ID.
  C. Move the database password to an environment variable associated with the Lambda function Retrieve the password from the environment variable upon execution
  D. Store the password in AWS Key Management Service (AWS KMS) Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID
  B. Store the password in AWS Secrets Manager . A associate the Lambda function with a role that can retrieve the password from secrets Manager given its secret ID.

  ---

  Explanation/Reference:

• Question 343:

  A company stores confidential data in an Amazon Aurora PostgreSQL database in the ap-southeast-3 Region The database is encrypted with an AWS Key Management Service (AWS KMS) customer managed key The company was recently acquired and must securely share a backup of the database with the acquiring company's AWS account in ap-southeast-3.

  What should a solutions architect do to meet these requirements?

  A. Create a database snapshot Copy the snapshot to a new unencrypted snapshot Share the new snapshot with the acquiring company's AWS account.
  B. Create a database snapshot Add the acquiring company's AWS account to the KMS key policy Share the snapshot with the acquiring company's AWS account.
  C. Create a database snapshot that uses a different AWS managed KMS key Add the acquiring company's AWS account to the KMS key alias. Share the snapshot with the acquiring company's AWS account.
  D. Create a database snapshot Download the database snapshot Upload the database snapshot to an Amazon S3 bucket Update the S3 bucket policy to allow access from the acquiring company's AWS account.
  A. Create a database snapshot Copy the snapshot to a new unencrypted snapshot Share the new snapshot with the acquiring company's AWS account.

• Question 344:

  A company is experiencing growth as demand for its product has increased The company's existing purchasing application is slow when traffic spikes The application is a monolithic three tier application that uses synchronous transactions

  and sometimes sees bottlenecks in the application tier A solutions architect needs to design a solution that can meet required application response times while accounting for traffic volume spikes.

  Which solution will meet these requirements?

  A. Vertically scale the application instance using a larger Amazon EC2 instance size.
  B. Scale the application's persistence layer horizontally by introducing Oracle RAC on AWS
  C. Scale the web and application tiers horizontally using Auto Scaling groups and an Application Load Balancer
  D. Decouple the application and data tiers using Amazon Simple Queue Service (Amazon SQS) with asynchronous AWS Lambda calls.
  C. Scale the web and application tiers horizontally using Auto Scaling groups and an Application Load Balancer

• Question 345:

  A company is running a media store across multiple Amazon EC2 instances distributed across multiple Availability Zones in a single VPC. The company wants a high-performing solution to share data between all the EC2 Instances, and prefers to keep the data within the VPC only.

  What should a solutions architect recommend?

  A. Create an Amazon S3 bucket and call the service APIs from each instance's application.
  B. Create an Amazon S3 bucket and configure all instances to access it as a mounted volume.
  C. Configure an Amazon Elastic Block Store (Amazon EBS) volume and mount it across all instances.
  D. Configure an Amazon Elastic File System (Amazon EFS) file system and mount it across all instances
  C. Configure an Amazon Elastic Block Store (Amazon EBS) volume and mount it across all instances.

  ---

  Explanation/Reference:

• Question 346:

  A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.

  What is the MOST cost-effective solution to connect these VPCs?

  A. Implement AWS Transit Gateway to connect the VPCs. Update the route tables of each VPC to use the transit gateway for inter-VPC communication.
  B. Implement an AWS Site-to-Site VPN tunnel between the VPCs. Update the route tables of each VPC to use the VPN tunnel for inter-VPC communication.
  C. Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.
  D. Set up a 1 GB AWS Direct Connect connection between the VPCs. Update the route tables of each VPC to use the Direct Connect connection for inter-VPC communication.
  C. Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.

  ---

  Explanation/Reference:

• Question 347:

  A company is running an ASP.NET MVC application on a single Amazon EC2 instance. A recent increase in application traffic is causing slow response times for users during lunch hours. The company needs to resolve this concern with the least amount of configuration.

  What should a solutions architect recommend to meet these requirements?

  A. Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling and time-based scaling to handle scaling during lunch hours
  B. Move the application to Amazon Elastic Container Service (Amazon ECS) Create an AWS Lambda function to handle scaling during lunch hours.
  C. Move the application to Amazon Elastic Container Service (Amazon ECS). Configure scheduled scaling for AWS Application Auto Scaling during lunch hours.
  D. Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling, and create an AWS Lambda function to handle scaling during lunch hours.
  A. Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling and time-based scaling to handle scaling during lunch hours

  ---

  Explanation/Reference:

  - Scheduled scaling is the solution here, while "using the least amount of settings possible"

  -Beanstalk vs moving to ECS

  - ECS requires MORE CONFIGURATION / SETTINGS (task and service definitions, configuring ECS container agent) than Beanstalk (upload application code)

  https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environments-cfg-autoscaling-scheduledactions.html

  Elastic Beanstalk supports time based scaling, since we are aware that the application performance slows down during the lunch hours.

  https://aws.amazon.com/about-aws/whats-new/2015/05/aws-elastic-beanstalk-supports-time-based-scaling/

• Question 348:

  A company is running a high performance computing (HPC) workload on AWS across many Linux based Amazon EC2 instances. The company needs a shared storage system that is capable of sub-millisecond latencies, hundreds of Gbps of throughput and millions of IOPS. Users will store millions of small files.

  Which solution meets these requirements?

  A. Create an Amazon Elastic File System (Amazon EFS) file system Mount me file system on each of the EC2 instances
  B. Create an Amazon S3 bucket Mount the S3 bucket on each of the EC2 instances
  C. Ensure that the EC2 instances ate Amazon Elastic Block Store (Amazon EBS) optimized Mount Provisioned lOPS SSD (io2) EBS volumes with Multi-Attach on each instance
  D. Create an Amazon FSx for Lustre file system. Mount the file system on each of the EC2 instances
  D. Create an Amazon FSx for Lustre file system. Mount the file system on each of the EC2 instances

• Question 349:

  Organizers for a global event want to put daily reports online as static HTML pages The pages are expected to generate millions of views from users around the world The files are stored in an Amazon S3 bucket A solutions architect has been asked to design an efficient and effective solution Which action should the solutions architect take to accomplish this?

  A. Generate presigned URLs for the files
  B. Use cross-Region replication to all Regions
  C. Use the geoproximity feature of Amazon Route 53
  D. Use Amazon CloudFront with the S3 bucket as its origin
  D. Use Amazon CloudFront with the S3 bucket as its origin

  ---

  Explanation/Reference:

  Using Amazon S3 Origins, MediaPackage Channels, and Custom Origins for Web Distributions Using Amazon S3 Buckets for Your Origin When you use Amazon S3 as an origin for your distribution, you place any objects that you want

  CloudFront to deliver in an Amazon S3 bucket. You can use any method that is supported by Amazon S3 to get your objects into Amazon S3, for example, the Amazon S3 console or API, or a third-party tool. You can create a hierarchy in

  your bucket to store the objects, just as you would with any other Amazon S3 bucket.

  Using an existing Amazon S3 bucket as your CloudFront origin server doesn't change the bucket in any way; you can still use it as you normally would to store and access Amazon S3 objects at the standard Amazon S3 price. You incur

  regular Amazon S3 charges for storing the objects in the bucket. Using Amazon S3 Buckets Configured as Website Endpoints for Your Origin You can set up an Amazon S3 bucket that is configured as a website endpoint as custom origin

  with CloudFront.

  When you configure your CloudFront distribution, for the origin, enter the Amazon S3 static website hosting endpoint for your bucket. This value appears in the Amazon S3 console, on the Properties tab, in the Static website hosting pane.

  For example:

  http://bucket-name.s3-website-region.amazonaws.com

  For more information about specifying Amazon S3 static website endpoints, see Website endpoints in the Amazon Simple Storage Service Developer Guide. When you specify the bucket name in this format as your origin, you can use

  Amazon S3 redirects and Amazon S3 custom error documents. For more information about Amazon S3 features, see the Amazon S3 documentation. Using an Amazon S3 bucket as your CloudFront origin server doesn't change it in any way.

  You can still use it as you normally would and you incur regular Amazon S3 charges.

  https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistS3AndCust omOrigins.html

• Question 350:

  A ride-sharing company stores historical service usage data as structured .csv data files in Amazon S3. A data analyst needs to perform SQL queries on this data. A solutions architect must recommend a solution that optimizes cost-effectiveness for the queries.

  Which solution meets these requirements?

  A. Create an Amazon EMR cluster. Load the data. Perform the queries.
  B. Create an Amazon Redshift cluster. Import the data. Perform the queries.
  C. Create an Amazon Aurora PostgreSQL DB cluster. Import the data. Perform the queries.
  D. Create an Amazon Athena database. Associate the data in Amazon S3. Perform the queries.
  D. Create an Amazon Athena database. Associate the data in Amazon S3. Perform the queries.

  ---

  Explanation/Reference:

  Reference: https://searchcloudcomputing.techtarget.com/answer/Compare-EMR-Redshift-and-Athena-for-data-analysis-on-AWS