Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon Amazon Certifications SAA-C02 Questions & Answers

  • Question 631:

    A company stores project information in a shared spreadsheet. The company wants to create a web application to replace the spreadsheet The company has chosen Amazon DynamoDB to store the spreadsheet's data and is designing the

    web application to display the project information that is obtained from DynamoDB.

    A solutions architect must design the web application's backend by using managed services that require minimal operational maintenance.

    Which architectures meet these requirements? (Select TWO.)

    A. An Amazon API Gateway REST API accesses the project information that is in DynamoDB.

    B. An Elastic Load Balancer forwards requests to a target group with DynamoDB set up as the target.

    C. An Amazon API Gateway REST API invokes an AWS Lambda function. The Lambda function accesses DynamoDB.

    D. An Amazon Route 53 hosted zone routes requests to an AWS Lambda endpoint to invoke a Lambda function that accesses DynamoDB.

    E. An Elastic Load Balancer forwards requests to a target group of Amazon EC2 instances. The EC2 instances run an application that accesses DynamoDB.

  • Question 632:

    A company's infrastructure consists of hundreds of Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) storage A solutions architect must ensure that every EC2 instance can be recovered after a disaster What should the solutions architect do to meet this requirement with the LEAST amount of effort?

    A. Take a snapshot of the EBS storage that is attached to each EC2 instance Create an AWS CloudFormation template to launch new EC2 instances from the EBS storage.

    B. Take a snapshot of the EBS storage that is attached to each EC2 instance Use AWS Elastic Beanstalk to set the environment based on the EC2 template and attach the EBS storage

    C. Use AWS Backup to set up a backup plan for the entire group of EC2 instances Use the AWS Backup API or the AWS CLI to speed up the restore process for multiple EC2 instances

    D. Create an AWS Lambda function to take a snapshot of the EBS storage that is attached to each EC2 instance and copy the Amazon Machine Images (AMIs) Create another Lambda function to perform the restores with the copied AMIs and attach the EBS storage

  • Question 633:

    A company hosts a two-tier website that runs on Amazon EC2 instances. The website has a database that runs on Amazon RDS for MySQL. All users are required to log in I customized pages.

    The website typically experiences low traffic. Occasionally, the website experiences sudden increases in traffic and becomes unresponsive. During these increases in traffic, write load. A solutions architect must improve the website's

    availability without changing the application code.

    What should the solutions architect do to meet these requirements?

    A. Create an Amazon ElastiCache for Redis cluster. Configure the application to cache common database queries in the ElastiCache cluster.

    B. Create an Auto Scaling group. Configure Amazon CloudWatch alarms to scale the number of EC2 instances based on the percentage of CPU in use during the traffic......

    C. Create an Amazon CloudFront distribution that points to the EC2 instances as the origin.Enable caching of dynamic content, and configure a write throttle from ......database.

    D. Migrate the database to an Amazon Aurora Serverless cluster. Set the maximum Aurora capacity units (ACUs) to a value high enough to respond to the traffic incre...........instances to connect to the Aurora database.

  • Question 634:

    A company is using AWS Key Management Service (AWS KMS) customer master keys (CMKs) to encrypt AWS Lambda environment variables A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables

    Which steps must the solutions architect take to implement the correct permissions? (Select TWO )

    A. Add AWS KMS permissions in the Lambda resource policy

    B. Add AWS KMS permissions in the Lambda execution role

    C. Add AWS KMS permissions in the Lambda function policy.

    D. Allow the Lambda execution role in the AWS KMS key policy

    E. Allow the Lambda resource policy in the AWS KMS key policy

  • Question 635:

    A solutions architect is designing the architecture for a software demonstration environment. The environment will run on Amazon EC2 instances in an Auto Seating group bel (ALB). The system will experience significant increases in traffic during working hours but is not required to operate on weekends.

    Which combination of actions should the solutions architect take to ensure that the system can scale to meet demand? (Select TWO.)

    A. Use AWS Auto Scaling to adjust the ALB capacity based on request rate.

    B. Use AWS Auto Scaling to scale the capacity of the VPC internet gateway.

    C. Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions.

    D. Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization.

    E. Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends. Revert to the default values at the start of

  • Question 636:

    A company is developing a new online gaming application The application will run on Amazon EC2 instances in multiple AWS Regions and will have a high number of globally distributed users A solutions architect must design the application to optimize network latency for the users.

    Which actions should the solutions architect take to meet these requirements? (Select TWO )

    A. Configure AWS Global Accelerator Create Regional endpoint groups in each Region where an EC2 fleet is hosted

    B. Create a content delivery network (CDN) by using Amazon CloudFront Enable caching for static and dynamic content, and specify a high expiration period

    C. Integrate AWS Client VPN into the application Instruct users to select which Region is closest to them after they launch the application Establish a VPN connection to that Region

    D. Create an Amazon Route 53 weighted routing policy Configure the routing policy to give the highest weight to the EC2 instances in the Region that has the largest number of users.

    E. Configure an Amazon API Gateway endpoint in each Region where an EC2 fleet is hosted Instruct users to select which Region is closest to them after they launch the application Use the API Gateway endpoint that is closest to them

  • Question 637:

    A company is running an application in a private subnet in a VPC win an attached internet gateway The company needs to provide the application access to the internet while restricting public access to the application The company does not want to manage additional infrastructure and wants a solution that is highly available and scalable

    Which solution meets these requirements?

    A. Create a NAT gateway in the private subnet. Create a route table entry from the private subnet to the internet gateway

    B. Create a NAT gateway m a public subnet Create a route table entry from the private subnet to the NAT gateway

    C. Launch a NAT instance m the private subnet Create a route table entry from the private subnet lo the internet gateway

    D. Launch a NAT Instance in a public subnet Create a route table entry from the private subnet to the NAT instance.

  • Question 638:

    A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instc The EC2 instances access Amazon S3 over the internet, but they

    do not require any other network access.

    A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet.

    Which change to the network architecture should a solutions architect recommend to meet this requirement?

    A. Create a NAT gateway. Configure the route table for the public subnets to send traffic to Amazon S3 through the NAT gateway.

    B. Configure the security group for the EC2 instances to restrict outbound traffic so that only traffic to the S3 prefix list is permitted.

    C. Move the EC2 instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets.

    D. Remove the internet gateway from the VPC. Set up an AWS Direct Connect connection, and route traffic to Amazon S3 over the Direct Connect connection.

  • Question 639:

    A company's web application resizes uploaded images lot users The application stores the original images and the resized images in Amazon S3 The company needs lo minimize the storage costs tor all the images Original images ate viewed frequently. and resized images are viewed infrequently after they are created Both types of images need to be immediately available

    Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

    A. Store the original images In S3 Standard.

    B. Store the resized images in S3 Standard

    C. Store the original images in S3 Glacier

    D. Store the resized Images In S3 Glacier

    E. Store the resized Images In S3 One Zone-Infrequent Access (S3 One Zone-IA).

  • Question 640:

    A company is deploying a new application lo Amazon Elastic Kubernetes Service (Amazon EKS) with an AWS Fargate duster The application needs a storage solution for data persistence The solution must be highly available and fault tolerant The solution also must be shared between multiple application containers

    Which solution will meet these requirements with the LEAST operational overhead?

    A. Create Amazon Elastic Block Store (Amazon EBS) volumes In the same Availability Zones where EKS worker nodes are placed. Register the volumes In a StorageClass object on an EKS cluster Use EBS Multi-Attach to share the data between containers

    B. Create an Amazon Elastic File System (Amazon EFS) tile system Register the tile system in a StorageClass object on an EKS cluster Use the same file system for all containers

    C. Create an Amazon Elastic Block Store (Amazon EBS) volume Register the volume In a StorageClass object on an EKS cluster Use the same volume for all containers.

    D. Create Amazon Elastic File System (Amazon EFS) file systems In the same Availability Zones where EKS worker nodes are placed Register the file systems in a StorageClass obied on an EKS duster Create an AWS Lambda function to synchronize the data between file systems

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.