Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon Amazon Certifications SAA-C02 Questions & Answers

  • Question 471:

    A company has an AWS account used for software engineering. The AWS account has access to the company's on-premises data center through a pair of AWS Direct Connect connections. All non-VPC traffic routes to the virtual private gateway.

    A development team recently created an AWS Lambada function through the console. The development team needs to allow the function to access a database that runs in a private subnet in the company's data center.

    Which solution will meet these requirements?

    A. Configure the Lambda function to run in the VPC with the appropriate security group.

    B. Set up a VPN connection from AWS to the data center. Route the traffic from the Lambda function through the VPN

    C. Update the route tables in the VPC to allow the Lambda function to access the on-premises data center through direct connect.

    D. Create an Elastic IP address. Configure the Lambda function to send traffic through the Elastic IP address without an elastic network interface.

  • Question 472:

    A company is developing a new mobile app. The company must implement proper traffic filtering to protect its Application Load Balanacer (ALB) against common application-level attacks, such as cross- site scripting or SQL injection. The

    company has minimal infrastructure and operational staff. The company needs to reduce its share of the responsibility in managing, updating and securing servers for its AWS environment.

    What should a solutions architect recommend to meet these requirements?

    A. Configure AWS WAF rules and associate them with the ALB

    B. Deploy the application using Amazon S3 with public hosting enabled.

    C. Deploy AWS shield Advanced and add the ALB asa protected resources

    D. Create a new ALB that directs traffic to an Amazon EC2 instance running a third-party firewall, which then passes the traffic to the current ALB

  • Question 473:

    A development team runs monthly resource-intensive tests on its general purpose Amazon RDS (or MySQL DB instance with Performance insights enabled. The testing lasts for 48 hours once a month and is the only process that uses the database. The team wants to reduce the cost of running the tests without reducing the compute and memory attributes of the DB instance Which solution meets these requirements MOST cost-effectively?

    A. Stop the DB instance when tests are completed Restart the DB instance when required

    B. Use an Auto Scaling policy with me DB instance to automatically scale when tests are completed

    C. Create a snapshot when tests are completed Terminate the DB instance and restore the snapshot when required

    D. Modify the DB instance to a low-capacity instance when tests are completed Modify the DB instance again when required

  • Question 474:

    A company manages its own Amazon EC2 instances that run MySQL databases. The company is manually managing replication and scaling as demand increases or decreases. The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed. The solution also must offer improved performance, scaling, and durability with minimal effort from operations.

    Which solution meets these requirements?

    A. Migrate thee databases to Amazon Aurora Serverless for Aurora MySQL

    B. Migrate tie databases to Amazon Aurora Serverless tor Aurora PostgreSQL

    C. Combine the databases into one larger MySQL database Run the larger database on larger EC2 instances

    D. Create an EC2 Auto Scaling group for the database tier Migrate the existing databases to the new environment.

  • Question 475:

    An 1AM user made several configuration changes to AWS resources in their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The

    solutions architect wants to confirm which 1AM user was responsible for making changes.

    Which service should the solutions architect use to find the desired information?

    A. Amazon GuardDuty

    B. Amazon Inspector

    C. AWS CloudTrail

    D. AWS Config

  • Question 476:

    A development team is deploying a new product on AWS and Is using AWS Lambda as part of the deployment. The team allocates 512 MB of memory for one of the Lambda functions. With this memory allocation, the function is completed in 2 minutes. The function runs millions of times monthly, and the development team is concerned about cost The team conducts tests to see how different Lambda memory allocations affect the cost of the function. Which steps will reduce the Lambda costs for the product? {Select TWO.)

    A. Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of each function to be less than 1 minute

    B. Increase the memory allocation for this Lambda function to 1.024 MB If this change causes the execution time of each function to be less than 90 seconds.

    C. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 4 minutes.

    D. Increase the memory allocation for this Lambda function to 2,048 MB If this change causes the execution time of each function to be less than 1 minute.

    E. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 5 minutes.

  • Question 477:

    A solutions architect is designing a solution for a dynamic website, "example.com," that is deployed in two AWS Regions: Tokyo. Japan and Sydney. Australia The architect wants to ensure that users located in Australia are directed to the

    website deployed in the Sydney AWS Region and users located in Japan are directed to the website in the Tokyo AWS Region when they browse to "example.com."

    Which service should the architect use to achieve this goal with the LEAST administrative effort?

    A. Amazon CloudFront with geolocation routing

    B. Amazon Route 53

    C. Application Load Balancer D. Network Load Balancer deployed across multiple regions

  • Question 478:

    A prediction process requires access to a trained model that is stored in an Amazon S3 bucket. The process takes a few seconds to process an image and make a prediction. The process is not overly resource-intensive, does not require any

    specialized hardware, and takes less than 512 MB of memory to run.

    What is the MOST effective compute solution for this use case?

    A. Amazon Elastic Container Service (Amazon ECS)

    B. Amazon EC2 Spot instances

    C. AWS Lambda functions

    D. AWS Elastic Beanstalk

  • Question 479:

    A customer has a service based out of Oregon. US and Paris. France. The application stores data in an Amazon S3 bucket located in Oregon. That data is updated frequently. The Pans office is experiencing slow response times when

    retrieving objects.

    What should a solutions architect do to resolve the slow response times for the Paris office?

    A. Set up an S3 bucket based in Paris, and enable Cross-Region Replication from the Oregon bucket to the Paris bucket.

    B. Create an Application Load Balancer that load balances data retrieval between the Oregon S3 bucket and a new Paris S3 bucket.

    C. Create an Amazon CloudFront distribution with the bucket located m Oregon as the origin and set the maximum TTL setting for the cache behavior to zero.

    D. Set up an S3 bucket based in Paris, and enable a lifecycle management rule to transition data from the Oregon bucket to the Paris bucket.

  • Question 480:

    A company has multiple AWS accounts with applications deployed in the us-west-2 Region Application togs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysts solution that uses a single S3 bucket Logs must not leave us-west-2T and the company wants to incur minimal operational overhead.

    Which solution meets these requirements and is MOST cost-effective?

    A. Create an S3 Lifecycle policy that copies the objects from one of the application S3 buckets to the centralized S3 bucket

    B. Use S3 Same-Region Replication to replicate togs from the S3 buckets to another S3 bucket in us- west-2 Use this S3 bucket for log analysis

    C. Write a script that uses the PutObject API operation every day to copy the entire contents of the buckets to another S3 bucket in us-west-2 Use this S3 bucket for log analysis

    D. Write AWS Lambda functions in these accounts that are triggered every time logs ate delivered to the S3 buckets (s3 ObjectCreated. * event) Copy the logs to another S3 bucket in us-west-2 Use this S3 bucket for log analysis

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.