Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 361:

  A company needs to use its on-premises LDAP directory service to authenticate its users to the AWS Management Console. The directory service is not compatible with Security Assertion Markup Language (SAML) Which solution meets these requirements?

  A. Enable AWS Single Sign-On between AWS and the on-premises LDAP
  B. Create an 1AM policy mat uses AWS credentials and integrate the policy into LDAP
  C. Set up a process that rotates the IAM credentials whenever LDAP credentials are updated.
  D. Develop an on-premises custom identity broker application of process mat uses AWS Security Token Service (AWS STS) to get short-lived credentials
  A. Enable AWS Single Sign-On between AWS and the on-premises LDAP

• Question 362:

  A company has a data ingestion workflow that includes the following components:

  1.

  An Amazon Simple Notation Service (Amazon SNS) topic that receives notifications about new data deliveries

  2.

  An AWS Lambda function that processes and stores the data

  The ingestion workflow occasionally fails because of network connectivity issues. When tenure occurs the corresponding data is not ingested unless the company manually reruns the job. What should a solutions architect do to ensure that all notifications are eventually processed?

  A. Configure the Lambda function or deployment across multiple Availability Zones
  B. Modify me Lambda functions configuration to increase the CPU and memory allocations tor the (unction
  C. Configure the SNS topic's retry strategy to increase both the number of retries and the wait time between retries
  D. Configure an Amazon Simple Queue Service (Amazon SQS) queue as the on failure destination Modify the Lambda function to process messages in the queue
  A. Configure the Lambda function or deployment across multiple Availability Zones

  ---

  Explanation/Reference:

• Question 363:

  A company has a 10 Gbps AWS Direct Connect connection from its on-premises servers to AWS. The workloads using the connection are critical. The company requires a disaster recovery strategy with maximum resiliency that maintains the

  current connection bandwidth at a minimum.

  What should a solutions architect recommend?

  A. Set up a new Direct Connect connection in another AWS Region.
  B. Set up a new AWS managed VPN connection in another AWS Region.
  C. Set up two new Direct Connect connections: one in the current AWS Region and one in another Region.
  D. Set up two new AWS managed VPN connections: one in the current AWS Region and one in another Region.
  B. Set up a new AWS managed VPN connection in another AWS Region.

• Question 364:

  A company has an application that loads documents into an Amazon 53 bucket and converts the documents into another format. The application stores the converted documents m another S3 bucket and saves the document name and URLs in an Amazon DynamoOB table The DynamoOB entries are used during subsequent days to access the documents The company uses a DynamoOB Accelerator (DAX) cluster in front of the table

  Recently, traffic to the application has increased. Document processing tasks are timing out during the scheduled DAX maintenance window. A solutions architect must ensure that the documents continue to load during the maintenance window

  What should the solutions architect do to accomplish this goal?

  A. Modify the application to write to the DAX cluster Configure the DAX cluster to write to the DynamoDB table when the maintenance window is complete
  B. Enable Amazon DynamoDB Streams for the DynamoDB table. Modify the application to write to the stream Configure the stream to load the data when the maintenance window is complete.
  C. Convert the application to an AWS Lambda function Configure the Lambda function runtime to be longer than the maintenance window Create an Amazon CloudWatch alarm to monitor Lambda timeouts
  D. Modify the application to write the document name and URLs to an Amazon Simple Queue Service (Amazon SOS) queue Create an AWS Lambda function to read the SOS queue and write to DynamoDB.
  C. Convert the application to an AWS Lambda function Configure the Lambda function runtime to be longer than the maintenance window Create an Amazon CloudWatch alarm to monitor Lambda timeouts

• Question 365:

  A company has a production web application in which users upload documents through a web interlace or a mobile app. According to a new regulatory requirement, new documents cannot be modified or deleted after they are stored. What should a solutions architect do to meet this requirement?

  A. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning and S3 Object Lock enabled
  B. Store the uploaded documents in an Amazon S3 bucket. Configure an S3 Lifecycle policy to archive the documents periodically.
  C. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning enabled Configure an ACL to restrict all access to read-only.
  D. Store the uploaded documents on an Amazon Elastic File System (Amazon EFS) volume. Access the data by mounting the volume in read-only mode.
  A. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning and S3 Object Lock enabled

• Question 366:

  A company wants to track its daily AWS resource usage to avoid reaching service quotas unexpectedly The company needs to receive notifications when any service quota is exceeded

  Which combination of actions should a solutions architect take to meet this requirement? (Select TWO.)

  A. Configure Amazon Simple Notification Service (Amazon SNS) as Ihe target to send notifications
  B. Use the DescribeTrustedAdvisorChecks API operation to get AWS Trusted Advisor Service Limits checks every 24 hours
  C. Create an AWS Lambda function that runs every 24 hours and refreshes the AWS Trusted Advisor Service Limits checks
  D. Use AWS Config to monitor the AWS resources service quotas and create a periodic invocation for an AWS Lambda function.
  E. Use Amazon EventBridge (Amazon CloudWatch Events) to capture the events. Configure Amazon Simple Notification Service (Amazon SNS) as the target
  B. Use the DescribeTrustedAdvisorChecks API operation to get AWS Trusted Advisor Service Limits checks every 24 hours
  D. Use AWS Config to monitor the AWS resources service quotas and create a periodic invocation for an AWS Lambda function.

• Question 367:

  A company used an AWS Direct Connect connection to copy 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region. The company now wants to copy the data to another S3 bucket in the us-weet-2 Region.

  Which solution will meet this requirement?

  A. Use an AWS Snowball Edge Storage Optimized device to copy the data from the colocation facility to ua-weet-2
  B. Use the S3 console to copy the data horn the source S3 bucket to the target S3 bucket.
  C. Use S3 Transfer Acceleration and the S3 copy-object command to copy the data from the source S3 bucket to the target S3 bucket
  D. Add an S3 Cross-Region Replication configuration to copy the data from the source S3 bucket to the target S3 bucket.
  D. Add an S3 Cross-Region Replication configuration to copy the data from the source S3 bucket to the target S3 bucket.

• Question 368:

  A company hosts a web application on multiple Amazon EC2 instances The EC2 instances are in an Auto Scaling group that scales in response to user demand The company wants to optimize cost savings without making a long-term commitment

  Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements'?

  A. Dedicated Instances only
  B. On-Demand Instances only
  C. A mix of On-Demand instances and Spot Instances
  D. A mix of On-Demand instances and Reserved instances
  A. Dedicated Instances only

• Question 369:

  A company has a website running on Amazon EC2 instances across two Availability Zones. The company is expecting spikes in traffic on specific holidays, and wants to provide a consistent user experience. How can a solutions architect meet this requirement?

  A. Use step scaling.
  B. Use simple scaling.
  C. Use lifecycle hooks.
  D. Use scheduled scaling.
  D. Use scheduled scaling.

• Question 370:

  A company is building its web application using containers on AWS. The company requires three instances of the web application to run at all times. The application must be able to scale to meet increases in demand. Management is extremely sensitive to cost but agrees that the application should be highly available.

  What should a solutions architect recommend?

  A. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Fargate launch type.Create a task definition for the web application. Create an ECS service with a desired count of three tasks.
  B. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Amazon EC2 launch type with three container instances in one Availability Zone. Create a task definition for the web application. Place one task for each container instance.
  C. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Fargate launch type with one container instance in three different Availability Zones. Create a task definition for the web application. Create an ECS service with a desired count of three tasks.
  D. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Amazon EC2 launch type with one container instance in two different Availability Zones. Create a task definition for the web application. Place two tasks on one container instance and one task on the remaining container instance.
  D. Create an Amazon Elastic Container Service (Amazon ECS) cluster using the Amazon EC2 launch type with one container instance in two different Availability Zones. Create a task definition for the web application. Place two tasks on one container instance and one task on the remaining container instance.

  ---

  Explanation/Reference: