SAA-C02 Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon SAA-C02 Online Questions & Answers

  • Question 381:

    A company has deployed a multiplayer game for mobile devices. The game requires live location tracking of players based on latitude and longitude. The data store for the game must support rapid updates and retrieval of locations.

    The game uses an Amazon RDS for PostgreSQL DB instance with read replicas to store the location data. During peak usage periods, the database is unable to maintain the performance that is needed for reading and writing updates. The

    game's user base is increasing rapidly.

    What should a solutions architect do to improve the performance of the data tier?

    A. Take a snapshot of the existing DB instance. Restore the snapshot with Multi-AZ enabled.
    B. Migrate from Amazon RDS to Amazon Elasticsearch Service (Amazon ES) with Kibana.
    C. Deploy Amazon DynamoDB Accelerator (DAX) in front of the existing DB instance. Modify the game to use DAX.
    D. Deploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis.

  • Question 382:

    An application calls a service run by a vendor. The vendor charges based on the number of calls. The finance department needs to know the number of calls that are made to the service to validate the billing statements.

    How can a solutions architect design a system to durably store the number of calls without requiring changes to the application?

    A. Call the service through an internet gateway
    B. Decouple the application from the service with an Amazon Simple Queue Service (Amazon SQS) queue
    C. Publish a custom Amazon CloudWatch metric that counts calls to the service
    D. Call the service through a VPC peering connection.

  • Question 383:

    A company hosts its application using Amazon Elastic Container Service (Amazon ECS) and wants to ensure high availability. The company wants to be able (o deploy updates to its application even if nodes in one Availability Zone are not

    accessible.

    The expected request volume for the application is 100 requests per second, and each container task is able to serve at least 60 requests pet second The company set up Amazon ECS with a rolling update deployment type with the minimum

    healthy percent parameter set to 50% and the maximum percent set lo 100%.

    Which configuration of tasks and Availability Zones meets these requirements?

    A. Deploy the application across two Availability Zones, with one task in each Availability Zone
    B. Deploy the application across two Availability Zones, with two tasks in each Availability Zone.
    C. Deploy the application across three Availability Zones, with one task in each Availability Zone.
    D. Deploy the application across three Availability Zones, with two tasks in each Availability Zone.

  • Question 384:

    A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new dies and must restrict all other users to read-only access No users can have the ability to modify or delete any files in the repository. The company must heap every lie in the repository for a minimum of 1 year after its creation date.

    Which solution will meet these requirements?

    A. Use S3 Object Lock In governance mode with a legal hold of 1 year
    B. Use S3 Object Lock in compliance mode with a retention period of 365 days.
    C. Use an IAM role to restrict all users from deleting or changing objects in the S3 bucket Use an S3 bucket policy to only allow the IAM role
    D. Configure the S3 bucket to invoke an AWS Lambda function every tune an object is added Configure the function to track the hash of the saved object to that modified objects can be marked accordingly

  • Question 385:

    A company hosts its web applications in the AWS Cloud. The company configures Elastic Load Balancers to use certificate that are imported into AWS Certificate Manager (ACM). The company's security team must be notified 30 days before the expiration of each certificate.

    What should a solutions architect recommend to meet the requirement?

    A. Add a rule m ACM to publish a custom message to an Amazon Simple Notification Service (Amazon SNS) topic every day beginning 30 days before any certificate will expire.
    B. Create an AWS Config rule that checks for certificates that will expire within 30 days. Configure Amazon EventBridge (Amazon CloudWatch Events) to invoke a custom alert by way of Amazon Simple Notification Service (Amazon SNS) when AWS Config reports a noncompliant resource
    C. Use AWS trusted Advisor to check for certificates that will expire within to days. Create an Amazon CloudWatch alarm that is based on Trusted Advisor metrics for check status changes Configure the alarm to send a custom alert by way of Amazon Simple rectification Service (Amazon SNS)
    D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to detect any certificates that will expire within 30 days. Configure the rule to invoke an AWS Lambda function. Configure the Lambda function to send a custom alert by way of Amazon Simple Notification Service (Amazon SNS).

  • Question 386:

    An application is running on Amazon EC2 instances Sensitive information required for the application is stored in an Amazon S3 bucket The bucket needs to be protected from internet access while only allowing services within the VPC access to the bucket. Which combination of actions should a solutions archived take to accomplish this'' (Select TWO.)

    A. Create a VPC endpoint for Amazon S3.
    B. Enable server access logging on the bucket
    C. Apply a bucket policy to restrict access to the S3 endpoint.
    D. Add an S3 ACL to the bucket that has sensitive information
    E. Restrict users using the IAM policy to use the specific bucket

  • Question 387:

    A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses. The security team is worried about potential DDoS attacks against the website The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users What should a solutions architect recommend?

    A. Deploy Amazon Inspector and associate it with the ALB.
    B. Deploy AWS WAF, associate it with cthe ALB, and configure a rate-limiting rule.
    C. Deploy rules to the network ACLs associated with the ALB to block the incoming traffic.
    D. Deploy Amazon GuardDuty and enable rate-limiting protection when configuring GuardDuty

  • Question 388:

    A solutions architect must migrate a Windows Internet Information Services (IIS) web application to AWS The application currently relies on a file share hosted in the user's on-premises network- attached storage (NAS). The solutions architect has proposed migrating the IIS web servers to Amazon EC2 instances in multiple Availability Zones that are connected to the storage solution, and configuring an Elastic Load Balancer attached to the instances. Which replacement to the on- premises file share is MOST resilient and durable?

    A. Migrate the file share to Amazon RDS.
    B. Migrate the file share to AWS Storage Gateway.
    C. Migrate the file share to Amazon FSx for Windows File Server.
    D. Migrate the file share to Amazon Elastic File System (Amazon EFS)

  • Question 389:

    A solutions architect must provide an automated solution for a company's compliance policy that states security groups cannot include a rule that allows SSH from 0.0.0.0/0. The company needs to be notified if there is any breach in the policy. A solution is needed as soon as possible.

    What should the solutions architect do to meet these requirements with the LEAST operational overhead?

    A. Write an AWS Lambda script that monitors security groups for SSH being open to 0.0.0.0/0 addresses and creates a notification every time it finds one.
    B. Enable the restricted-ssh AWS Config managed rule and generate an Amazon Simple Notification Service (Amazon SNS) notification when a noncompliant rule is created.
    C. Create an IAM role with permissions to globally open security groups and network ACLs. Create an Amazon Simple Notification Service (Amazon SNS) topic to generate a notification every time the role is assumed by a user.
    D. Configure a service control policy (SCP) that prevents non-administrative users from creating or editing security groups. Create a notification in the ticketing system when a user requests a rule that needs administrator permissions.

  • Question 390:

    A company wants to create a mobile app that allows users to stream slow-motion video clips on their mobile devices Currently, the app captures video clips and uploads the video clips in raw format into an Amazon S3 bucket The app retrieves these video clips directly from the S3 bucket. However the videos are large in their raw format.

    Users are experiencing issues with buffering and playback on mobile devices. The company wants to implement solutions to maximize the performance and scalability of the app while minimizing operational overhead.

    Which combination of solutions will meet these requirements? (Select TWO.)

    A. Deploy Amazon CloudFront for content delivery and caching
    B. Use AWS DataSync to replicate the video files across AWS Regions in other S3 buckets
    C. Use Amazon Elastic Transcoder to convert the video files to more appropriate formats
    D. Deploy an Auto Scaling group of Amazon EC2 instances in Local Zones for content delivery and caching
    E. Deploy an Auto Scaling group of Amazon EC2 instances to convert the video files to more appropriate formats

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.