Amazon Amazon Certifications SAA-C02 Questions & Answers

• Question 441:

  How is AWS readily distinguished from other vendors in the traditional IT computing landscape?

  A. Experienced. Scalable and elastic. Secure. Cost-effective. Reliable

  B. Secure. Flexible. Cost-effective. Scalable and elastic. Global

  C. Secure. Flexible. Cost-effective. Scalable and elastic. Experienced

  D. Flexible. Cost-effective. Dynamic. Secure. Experienced.

  Correct Answer: C

• Question 442:

  You control access to S3 buckets and objects with:

  A. Identity and Access Management (IAM) Policies.

  B. Access Control Lists (ACLs).

  C. Bucket Policies.

  D. All of the above

  Correct Answer: D

• Question 443:

  The AWS IT infrastructure that AWS provides, complies with the following IT security standards, including:

  A. SOC 1/SSAE 16/ISAE 3402 (formerly SAS 70 Type II), SOC 2 and SOC 3

  B. FISMA, DIACAP, and FedRA|V|P

  C. PCI DSS Level 1, ISO 27001, ITAR and FIPS 140-2

  D. HIPAA, Cloud Security Alliance (CSA) and Motion Picture Association of America (NIPAA)

  E. All of the above

  Correct Answer: ABC

• Question 444:

  Auto Scaling requests are signed with a signature calculated from the request and the user's private key.

  A. SSL

  B. AES-256

  C. HMAC-SHA1

  D. X.509

  Correct Answer: C

• Question 445:

  A customer is deploying an SSL enabled web application to AWS and would like to implement a separation of roles between the EC2 service administrators that are entitled to login to instances as well as making API calls and the security officers who will maintain and have exclusive access to the appIication's X.509 certificate that contains the private key.

  A. Upload the certificate on an S3 bucket owned by the security officers and accessible only by EC2 Role of the web servers.

  B. Configure the web servers to retrieve the certificate upon boot from an CIoudHSM is managed by the security officers.

  C. Configure system permissions on the web servers to restrict access to the certificate only to the authority security officers

  D. Configure IAM policies authorizing access to the certificate store only to the security officers and terminate SSL on an ELB.

  Correct Answer: D

• Question 446:

  Which is a valid Amazon Resource name (ARN) for IAM?

  A. aws:iam::123456789012:instance-profile/\Nebserver

  B. arn:aws:iam::123456789012:instance-profile/Webserver

  C. 123456789012:aws:iam::instance-profi|e/\Nebserver

  D. arn:aws:iam::123456789012::instance-profile/\Nebserver

  Correct Answer: B

• Question 447:

  Your company plans to host a large donation website on Amazon Web Sewices (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS. Which sewice should you use?

  A. Amazon RDS with provisioned IOPS up to the anticipated peak write throughput.

  B. Amazon Simple Queue Service (SQS) for capturing the writes and draining the queue to write to the database.

  C. Amazon EIastiCache to store the writes until the writes are committed to the database.

  D. Amazon DynamoDB with provisioned write throughput up to the anticipated peak write throughput.

  Correct Answer: B

• Question 448:

  Your company hosts a social media site supporting users in multiple countries. You have been asked to provide a highly available design tor the application that leverages multiple regions tor the most recently accessed content and latency sensitive portions of the wet) site The most latency sensitive component of the application involves reading user preferences to support web site personalization and ad selection. In addition to running your application in multiple regions, which option will support this appIication's requirements?

  A. Serve user content from S3. CIoudFront and use Route53 latency-based routing between ELBs in each region Retrieve user preferences from a local DynamoDB table in each region and leverage SQS to capture changes to user preferences with SOS workers for propagating updates to each table.

  B. Use the S3 Copy API to copy recently accessed content to multiple regions and serve user content from S3. C|oudFront with dynamic content and an ELB in each region Retrieve user preferences from an EIasticCache cluster in each region and leverage SNS notifications to propagate user preference changes to a worker node in each region.

  C. Use the S3 Copy API to copy recently accessed content to multiple regions and serve user content from S3 CIoudFront and Route53 latency-based routing Between ELBs In each region Retrieve user preferences from a DynamoDB table and leverage SQS to capture changes to user preferences with SOS workers for propagating DynamoDB updates.

  D. Serve user content from S3. C|oudFront with dynamic content, and an ELB in each region Retrieve user preferences from an EIastiCache cluster in each region and leverage Simple Workflow (SWF) to manage the propagation of user preferences from a centralized OB to each EIastiCache cluster.

  Correct Answer: A

• Question 449:

  You are responsible for a web application that consists of an Elastic Load Balancing (ELB) load balancer in front of an Auto Scaling group of Amazon Elastic Compute Cloud (EC2) instances. For a recent deployment of a new version of the

  application, a new Amazon Machine Image (AMI) was created, and the Auto Scaling group was updated with a new launch configuration that refers to this new AMI. During the deployment, you received complaints from users that the website

  was responding with errors. All instances passed the ELB health checks.

  What should you do in order to avoid errors for future deployments? (Choose 2 answer)

  A. Add an Elastic Load Balancing health check to the Auto Scaling group. Set a short period for the health checks to operate as soon as possible in order to prevent premature registration of the instance to the load balancer.

  B. Enable EC2 instance C|oudWatch alerts to change the launch configuration's AMI to the previous one. Gradually terminate instances that are using the new AMI.

  C. Set the Elastic Load Balancing health check configuration to target a part of the application that fully tests application health and returns an error if the tests fail.

  D. Create a new launch configuration that refers to the new AMI, and associate it with the group. Double the size of the group, wait for the new instances to become healthy, and reduce back to the original size. If new instances do not become healthy, associate the previous launch configuration.

  E. Increase the Elastic Load Balancing Unhealthy Threshold to a higher value to prevent an unhealthy instance from going into service behind the load balancer.

  Correct Answer: CD

• Question 450:

  A healthcare computer stores highly sensitive records. Compliance requires that multiple copies be stored in different locations. Each record must be stored for 7 years. The company has a service level agreement (SLA) to provide records to government agencies immediately for the first 30 days and thin within 4 hours of a request thereafter.

  What should a solutions architect recommend?

  A. Use Amazon S3 with cross-Region Region replication enabled. After 30 days. Transition the data to Amazon S3 Glacier using lifecycle policy.

  B. Use Amazon S3 with cross-origin resource sharing (CCRS) enabled. After 30 days. Transition on the data to Amazon S3 Glacier using a lifecycle policy.

  C. Use Amazon S3 with cross-origin replication enabled. After 30 days, transition the data to Amazon S3 Glacier Deep Archive a lifecycle policy.

  D. Use Amazon S3 with cross-origin resource sharing (CCRS) enabled. After 30 days, transition on the data to Amazon S3 Glacier Deep Archive using a lifecycle policy.

  Correct Answer: C