Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 621:

  A solutions architect is designing a new workload in which an AWS Lambda function will access an Amazon DynamoDB table. What is the MOST secure means of granting the Lambda function access tothe DynamoDB labia?

  A. Create an IAM role with the necessary permissions to access the DynamoDB table Assign the role to the Lambda function.
  B. Create a DynamoDB user name and password and give them to the developer to use in the Lambda function.
  C. Create an IAM user, and create access and secret keys for the user. Give the user the necessary permissions to access the DynarnoOB table. Have the developer use these keys to access the resources.
  D. Create an IAM role allowing access from AWS Lambda Assign the role to the DynamoDB table
  A. Create an IAM role with the necessary permissions to access the DynamoDB table Assign the role to the Lambda function.

• Question 622:

  A company has a website deployed on AWS. The database backend is hosted on Amazon RDS for MySQL with a primary instance and five read replicas to support scaling needs. The read replicas should lag no more than 1 second behind the primary instance to support the user experience As traffic on the website continues to increase, the replicas are falling further behind during periods of peak load, resulting in complaints from users when searches yield inconsistent results A solutions architect needs to reduce the replication lag as much as possible, with minimal changes to the application code or operational requirements Which solution meets these requirements?

  A. Migrate the database to Amazon Aurora MySQL Replace the MySQL read replicas with Aurora Replicas and enable Aurora Auto Scaling
  B. Deploy an Amazon ElastiCache for Redis cluster in front of the database Modify the website to check the cache before querying the database read endpoints
  C. Migrate the database from Amazon RDS to MySQL running on Amazon EC2 compute instances.Choose very large compute optimized instances for all replica nodes.
  D. Migrate the database to Amazon DynamoDB Initially provision a large number of read capacity units (RCUs) to support the required throughput with on-demand capacity scaling enabled
  B. Deploy an Amazon ElastiCache for Redis cluster in front of the database Modify the website to check the cache before querying the database read endpoints

• Question 623:

  A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL.

  What should a solutions architect do to meet these requirements?

  A. Write individual policies for each S3 bucket to grant read permission for only CloudFront access.
  B. Create an IAM user. Grant the user read permission to objects in the S3 bucket. Assign the user to CloudFront.
  C. Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN).
  D. Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution. Configure the S3 bucket permissions so that only the OAI has read permission.
  D. Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution. Configure the S3 bucket permissions so that only the OAI has read permission.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

• Question 624:

  A solutions architect must design a database solution for a high-traffic ecommerce web application. The database stores customer profiles and shopping cart information. The database must support a peak load of several million requests each second and deliver responses in milliseconds. The operational overhead for managing and scaling the database must be minimized.

  Which database solution should the solutions architect recommend?

  A. Amazon Aurora
  B. Amazon DynamoDB
  C. Amazon RDS
  D. Amazon Redshift
  B. Amazon DynamoDB

  ---

  Explanation/Reference:

  DynamoDB supports millions of request.

• Question 625:

  A company is running a global application. The application's users submit multiple videos that are then merged into a single video file. The application uses a single Amazon..... to receive uploads from users. The same S3 bucket provides the

  download location of the single video file that is produced. The final video file output has an average size of......

  The company needs to develop a solution that delivers faster uploads and downloads of the video files that are stored in Amazon S3. The company will offer the solution as a pay for the increased speed.

  What should a solutions architect do to meet these requirements?

  A. Enable AWS Global Accelerator for the S3 endpoint. Adjust the application's upload and download links to use the Global Accelerator S3 endpoint for users who
  B. Enable S3 Cross-Region Replication to S3 buckets in all other AWS Regions. Use an Amazon Route 53 geolocation routing policy to route S3 requests based on th.........subscription.
  C. Create an Amazon CloudFront distribution, and use the S3 bucket in us-east-1 as an origin. Adjust the application to use the CloudFront URL as the upload and do...........subscription.
  D. Enable S3 Transfer Acceleration for the S3 bucket in us-east-1. Configure the application to use the bucket's S3-accelerate endpoint domain name for the upload at.......... have a subscription.
  D. Enable S3 Transfer Acceleration for the S3 bucket in us-east-1. Configure the application to use the bucket's S3-accelerate endpoint domain name for the upload at.......... have a subscription.

• Question 626:

  A media company has an application that tracks user clicks on its websites and performs analytics to provide near-real time recommendations. The application has a Heel of Amazon EC2 instances that receive data from the websites and send the data lo an Amazon RDS DB instance Another fleet of EC2 instances hosts the portion of the application that is continuously checking changes in the database and executing SQL queries to provide recommendations. Management has requested a redesign to decouple the infrastructure The solution must ensure that data analysts are writing SQL to analyze the data only No data can the lost during the deployment What should a solutions architect recommend?

  A. Use Amazon Kinesis Data Streams to capture the data from the websites Kinesis Data Firehose to persist the data on Amazon S3, and Amazon Athena to query the data
  B. Use Amazon Kinesis Data Streams to capture the data from the websites. Kinesis Data Analytics to query the data, and Kinesis Data Firehose to persist the data on Amazon S3
  C. Use Amazon Simple Queue Service (Amazon SQS) to capture the data from the websites, keep the fleet of EC2 instances, and change to a bigger instance type in the Auto Scaling group configuration
  D. Use Amazon Simple Notification Service (Amazon SNS) to receive data from the websites and proxy the messages to AWS Lambda functions that execute the queries and persist the data Change Amazon RDS to Amazon Aurora Serverless to persist the data
  B. Use Amazon Kinesis Data Streams to capture the data from the websites. Kinesis Data Analytics to query the data, and Kinesis Data Firehose to persist the data on Amazon S3

• Question 627:

  A company's HTTP application is behind a Network Load Balancer (NLB). The NLB's target group is configured to use an Amazon EC2 Auto Scaling group with multiple EC2 instances that run the web service.

  The company notices that the NLB is not detecting HTTP errors for the application. These errors require a manual restart of the EC2 instances that run the web service. The company needs to improve the application's availability without

  writing custom scripts or code.

  What should a solutions architect do to meet these requirements?

  A. Enable HTTP health checks on the NLB, supplying the URL of the company's application.
  B. Add a cron job to the EC2 instances to check the local application's logs once each minute. If HTTP errors are detected, the application will restart.
  C. Replace the NLB with an Application Load Balancer. Enable HTTP health checks by supplying the URL of the company's application. Configure an Auto Scaling action to replace unhealthy instances.
  D. Create an Amazon CloudWatch alarm that monitors the UnhealthyHostCount metric for the NLB. Configure an Auto Scaling action to replace unhealthy instances when the alarm is in the ALARM state.
  C. Replace the NLB with an Application Load Balancer. Enable HTTP health checks by supplying the URL of the company's application. Configure an Auto Scaling action to replace unhealthy instances.

• Question 628:

  A company is designing a cloud communications platform trial is driven by APIs. The application is hosted on Amazon EC2 instances behind a Network Load Balancer (NLB). The company uses Amazon API Gateway to provide external users with access to the application through APIs. The company wants to protect the platform against web exploits like SQL Injection and also wants to detect and mitigate large, sophisticated DDoS attacks

  Which combination of solutions provides the MOST protection? (Select TWO.)

  A. Use AWS WAF to protect the NLB
  B. Use AWS Shield Advanced with the NLB
  C. Use AWS WAF to protect Amazon API Gateway
  D. Use Amazon GuardDuty with AWS Shield Standard
  E. Use AWS Shield Standard with Amazon API Gateway
  B. Use AWS Shield Advanced with the NLB
  C. Use AWS WAF to protect Amazon API Gateway

  ---

  Explanation/Reference:

• Question 629:

  A company is using AWS to design a web application that will process insurance quotes Users will request quotes from the application Quotes must be separated by quote type, must be responded to within 24 hours, and must not get lost The solution must maximize operational efficiency and must minimize maintenance.

  Which solution meets these requirements?

  A. Create multiple Amazon Kinesis data streams based on the quote type Configure the web application to send messages to the proper data stream Configure each backend group of application servers to pool messages from its own data stream using the Kinesis Client Library (KCL)
  B. Create multiple Amazon Simple Notification Service {Amazon SNS) topics and register Amazon SQS queues to their own SNS topic based on the quote type. Configure the web application to publish messages to the SNS topic queue Configure each backend application server to work its own SQS queue
  C. Create a single Amazon Simple Notification Service {Amazon SNS) topic and subscribe the Amazon SQS queues to the SNS topic Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type.Configure each backend application server to work its own SQS queue.
  D. Create multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon Elasticsearch Service {Amazon ES) cluster. Configure the web application to send messages to the proper delivery stream Configure each backend group of application servers to search for the messages from Amazon ES and process them accordingly
  C. Create a single Amazon Simple Notification Service {Amazon SNS) topic and subscribe the Amazon SQS queues to the SNS topic Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type.Configure each backend application server to work its own SQS queue.

  ---

  Explanation/Reference:

• Question 630:

  A company is Re-architecting a strongly coupled application to be loosely coupled Previously the application used a request/response pattern to communicate between tiers. The company plans to use Amazon Simple Queue Service (Amazon SQS) to achieve decoupling requirements. The initial design contains one queue for requests and one for responses However, this approach is not processing all the messages as the application scales. What should a solutions architect do to resolve this issue?

  A. Configure a dead-letter queue on the ReceiveMessage API action of the SQS queue.
  B. Configure a FIFO queue, and use the message deduplication ID and message group ID.
  C. Create a temporary queue, with the Temporary Queue Client to receive each response message.
  D. Create a queue for each request and response on startup for each producer, and use a correlation ID message attribute.
  A. Configure a dead-letter queue on the ReceiveMessage API action of the SQS queue.