Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 591:

  A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer The application stores data in Amazon Aurora. The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy.

  What should a solutions architect do to meet these requirements?

  A. Deploy the application with the required infrastructure elements in place Use Amazon Route 53 to configure active-passive failover Create an Aurora Replica in a second AWS Region
  B. Host a scaled-down deployment of the application in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora Replica in the second Region
  C. Replicate the primary infrastructure in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora database that is restored from the latest snapshot
  D. Back up data with AWS Backup Use the backup to create the required infrastructure in a second AWS Region Use Amazon Route 53 to configure active-passive failover Create an Aurora second primary instance in the second Region
  C. Replicate the primary infrastructure in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora database that is restored from the latest snapshot

• Question 592:

  A company wants to enforce strict security guidelines on accessing AWS Cloud resources as the company migrates production workloads from its data centers. Company management wants all users to receive permissions according to their job roles and functions.

  Which solution meets these requirements with the LEAST operational overhead?

  A. Create an AWS Single Sign-On deployment. Connect to the on-premises Active Directory to centrally manage users and permissions across the company
  B. Create an 1AM role for each job function. Require each employee to call the stsiAssumeRole action in the AWS Management Console to perform their job role.
  C. Create individual 1AM user accounts for each employee Create an 1AM policy for each job function, and attach the policy to all 1AM users based on their job role.
  D. Create individual 1AM user accounts for each employee. Create 1AM policies for each job function. Create 1AM groups, and attach associated policies to each group. Assign the 1AM users to a group based on their Job role.
  D. Create individual 1AM user accounts for each employee. Create 1AM policies for each job function. Create 1AM groups, and attach associated policies to each group. Assign the 1AM users to a group based on their Job role.

• Question 593:

  A company runs a web service on Amazon EC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across two Availability Zones The company needs a minimum of four instances at all

  limes to meet the required service level agreement (SLA) while keeping costs low.

  If an Availability Zone fails, how can the company remain compliant with the SLA?

  A. Add a target tracking scaling policy with a short cooldown period
  B. Change the Auto Scaling group launch configuration to use a larger instance type
  C. Change the Auto Scaling group to use six servers across three Availability Zones
  D. Change the Auto Scaling group to use eight servers across two Availability Zones
  D. Change the Auto Scaling group to use eight servers across two Availability Zones

• Question 594:

  A company has multiple AWS accounts with applications deployed in the us-west-2 Region Application togs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysts solution that uses a single S3 bucket Logs must not leave us-west-2T and the company wants to incur minimal operational overhead.

  Which solution meets these requirements and is MOST cost-effective?

  A. Create an S3 Lifecycle policy that copies the objects from one of the application S3 buckets to the centralized S3 bucket
  B. Use S3 Same-Region Replication to replicate togs from the S3 buckets to another S3 bucket in us- west-2 Use this S3 bucket for log analysis
  C. Write a script that uses the PutObject API operation every day to copy the entire contents of the buckets to another S3 bucket in us-west-2 Use this S3 bucket for log analysis
  D. Write AWS Lambda functions in these accounts that are triggered every time logs ate delivered to the S3 buckets (s3 ObjectCreated. * event) Copy the logs to another S3 bucket in us-west-2 Use this S3 bucket for log analysis
  B. Use S3 Same-Region Replication to replicate togs from the S3 buckets to another S3 bucket in us- west-2 Use this S3 bucket for log analysis

  ---

  Explanation/Reference:

• Question 595:

  A company uses a legacy application to produce data in CSV format The legacy application stores the output data In Amazon S3 The company is deploying a new commercial off-the-shelf (COTS) application that can perform complex SQL queries to analyze data that is stored Amazon Redshift and Amazon S3 only However the COTS application cannot process the csv files that the legacy application produces The company cannot update the legacy application to produce data in another format The company needs to implement a solution so that the COTS application can use the data that the legacy applicator produces.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Create a AWS Glue extract, transform, and load (ETL) job that runs on a schedule. Configure the ETL job to process the .csv files and store the processed data in Amazon Redshit.
  B. Develop a Python script that runs on Amazon EC2 instances to convert the. csv files to sql files invoke the Python script on cron schedule to store the output files in Amazon S3.
  C. Create an AWS Lambda function and an Amazon DynamoDB table. Use an S3 event to invoke the Lambda function. Configure the Lambda function to perform an extract transform, and load (ETL) job to process the .csv files and store the processed data in the DynamoDB table.
  D. Use Amazon EventBridge (Amazon CloudWatch Events) to launch an Amazon EMR cluster on a weekly schedule. Configure the EMR cluster to perform an extract, tractform, and load (ETL) job to process the .csv files and store the processed data in an Amazon Redshift table.
  C. Create an AWS Lambda function and an Amazon DynamoDB table. Use an S3 event to invoke the Lambda function. Configure the Lambda function to perform an extract transform, and load (ETL) job to process the .csv files and store the processed data in the DynamoDB table.

• Question 596:

  A company uses an Amazon Auroia PostgreSQL DB cluster 10 store its critical data m tne us-east-l Region The company wants to develop a disaster recovery plan to recover the database m the us west 1 Region The company has a recovery time objective (RTO) of S minutes and has a recovery point objective (RPO) of 1 minute

  What should a solutions architect do to moot these requirements?

  A. Create a read replica in us-west-1 Set the DB cluster to automaKaliy fail over to the read replica if the primary instance is not responding
  B. Create an Aurora global database Sel us-west-1 as the secondary Region update connections to use the writer and reader endpomis as appropriate
  C. Set up a second Aurora DB cluster in us-west-1 Use logical replication to keep the databases synchronized Create an Amazon EvontBridgc (Amazon CloudWatch Events) rule to change the database endpoint rf the primary DB cluster does not respond.
  D. Use Aurora automated snapshots to store data in an Amazon S3 bucket Enable S3 Verswnmg. Configure S3 Cross-Region Replication to us-west-1 Create a second Aurora DB cluster in us-west-1 Create an Amazon EventBndge (Amazon CloudWatch Events) rule to restore the snapshot il the primary D8 cluster does not respond
  B. Create an Aurora global database Sel us-west-1 as the secondary Region update connections to use the writer and reader endpomis as appropriate

• Question 597:

  A company is developing a data lake solution in Amazon S3 to analyze large scale datasets. The solution makes infrequent SOL queries only in addition, the company wants to minimize infrastructure costs Which AWS service should be used to meet these requirements?

  A. Amazon Athena
  B. Amazon Redshift Spectrum
  C. Amazon RDS for PostgreSQL
  D. Amazon Aurora
  B. Amazon Redshift Spectrum

• Question 598:

  A company wants to establish connectivity between its on-premlses data center and AWS (or an existing workload. The workload runs on Amazon EC2 Instances in two VPCs In different AWS Regions. The VPCs need to communicate with each other. The company needs to provide connectivity from Its data center to both VPCs. The solution must support a bandwidth of 600 Mbps to the data center.

  Which solution will meet these requirements?

  A. Set up an AWS Site-to-Site VPN connection between the data center and one VPC. Create a VPC peering connection between the VPCs.
  B. Set up an AWS Site-to-Site VPN connection between the data center and each VPC. Create a VPC peering connection between the VPCs.
  C. Set up an AWS Direct Connect connection between the data center and one VPC. Create a VPC peering connection between the VPCs.
  D. Create a transit gateway. Attach both VPCs to the transit gateway. Create an AWS Slte- to-Site VPN tunnel to the transit gateway.
  B. Set up an AWS Site-to-Site VPN connection between the data center and each VPC. Create a VPC peering connection between the VPCs.

  ---

  Explanation/Reference:

• Question 599:

  A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.

  Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

  A. Take a manual snapshot of the DB cluster.
  B. Create a lifecycle policy for the automated backups.
  C. Configure automated backup retention for 5 years.
  D. Configure an Amazon CloudWatch Logs export for the DB cluster.
  E. Use AWS Backup to take the backups and to keep the backups for 5 years.
  A. Take a manual snapshot of the DB cluster.
  D. Configure an Amazon CloudWatch Logs export for the DB cluster.

• Question 600:

  A company wants to implement a disaster recovery plan for its primary on-premises file storage volume. The file storage volume is mounted from an Internet Small Computer Systems Interface (iSCSI) device on a local storage server. The file storage volume holds hundreds of terabytes (TB) of data.

  The company wants to ensure that end users retain immediate access to all file types from the on-premises systems without experiencing latency.

  Which solution will meet these requirements with the LEAST amount of change to the company's existing infrastructure?

  A. Provision an Amazon S3 File Gateway as a virtual machine (VM) that is hosted on premises. Set the local cache to 10 TB. Modify existing applications to access the files through the NFS protocol. To recover from a disaster, provision an Amazon EC2 instance and mount the S3 bucket that contains the files.
  B. Provision an AWS Storage Gateway tape gateway. Use a data backup solution to back up all existing data to a virtual tape library. Configure the data backup solution to run nightly after the initial backup is complete. To recover from a disaster, provision an Amazon EC2 instance and restore the data to an Amazon Elastic Block Store (Amazon EBS) volume from the volumes in the virtual tape library.
  C. Provision an AWS Storage Gateway Volume Gateway cached volume. Set the local cache to 10 TB. Mount the Volume Gateway cached volume to the existing file server by using iSCSI. and copy all files to the storage volume. Configure scheduled snapshots of the storage volume. To recover from a disaster, restore a snapshot to an Amazon Elastic Block Store (Amazon EBS) volume and attach the EBS volume to an Amazon EC2 instance.
  D. Provision an AWS Storage Gateway Volume Gateway stored volume with the same amount of disk space as the existing file storage volume. Mount the Volume Gateway stored volume to the existing file server by using iSCSI, and copy all files to the storage volume. Configure scheduled snapshots of the storage volume. To recover from a disaster, restore a snapshot to an Amazon Elastic Block Store (Amazon EBS) volume and attach the EBS volume to an Amazon EC2 instance.
  C. Provision an AWS Storage Gateway Volume Gateway cached volume. Set the local cache to 10 TB. Mount the Volume Gateway cached volume to the existing file server by using iSCSI. and copy all files to the storage volume. Configure scheduled snapshots of the storage volume. To recover from a disaster, restore a snapshot to an Amazon Elastic Block Store (Amazon EBS) volume and attach the EBS volume to an Amazon EC2 instance.