Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 641:

  A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS Cloud Formation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials.

  Which solution meets these requirements with the LEAST operational effort?

  A. Create a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.
  B. Create a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store Configure the EC2 instances to retrieve the database credentials from Parameter Store.
  C. Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.
  D. Configure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.
  C. Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/deploying.applications.html

• Question 642:

  A user wants to list the IAM role that is attached to their Amazon EC2 instance The user has login access to the EC2 instance but does not have IAM permissions What should a solutions architect do to retrieve this information?

  A. Run the following EC2 command curl http://169.254.169.254/latest/meta-data/iam/info
  B. Run the following EC2 command curl http://169.254.169.254/latest-/user-data/iam/info
  C. Run the following EC2 command http://169.254.169.254/latest/dynamic/instance-idencity/
  D. Run the following AWS CLI command aws iam get-instance-prof lie --instance-profile-name ExamplelnstanceProfile
  A. Run the following EC2 command curl http://169.254.169.254/latest/meta-data/iam/info

  ---

  Explanation/Reference:

• Question 643:

  A company runs an application on a group of Amazon Linux EC2 instances The application writes log files using standard API calls For compliance reasons, all log files must be retained indefinitely and will be analyzed by a reporting tool that must access all files concurrently Which storage service should a solutions architect use to provide the MOST cost-effective solution?

  A. Amazon EBS
  B. Amazon EFS
  C. Amazon EC2 instance store
  D. Amazon S3
  D. Amazon S3

  ---

  Explanation/Reference:

  Amazon S3 Requests to Amazon S3 can be authenticated or anonymous. Authenticated access requires credentials that AWS can use to authenticate your requests. When making REST API calls directly from your code, you create a signature using valid credentials and include the signature in your request. Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry- leading scalability, data availability, security, and performance. This means customers of all sizes and industries can use it to store and protect any amount of data for a range of use cases, such as websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics. Amazon S3 provides easy-to-use management features so you can organize your data and configure finely-tuned access controls to meet your specific business, organizational, and compliance requirements. Amazon S3 is designed for 99.999999999% (11 9's) of durability, and stores data for millions of applications for companies all around the world. https://aws.amazon.com/s3/

• Question 644:

  A company wants to run a hybrid workload for data processing. The data needs to be accessed by on- premises applications for local data processing using an NFS protocol, and must also be accessible from the AWS Cloud for further analytics and batch processing.

  Which solution will meet these requirements?

  A. Use an AWS Storage Gateway fife gateway to provide file storage to AWS. then perform analytics on the data in the AWS Cloud.
  B. Use an AWS Storage Gateway tape gateway to copy the backup of the local data to AWS. then perform analytics on this data in the AWS Cloud.
  C. Use an AWS Storage Gateway volume gateway in a stored volume configuration to regularly take snapshots of the local data, then copy the data to AWS.
  D. Use an AWS Storage Gateway volume gateway in a cached volume configuration to back up all the local storage in the AWS Cloud, then perform analytics on this data in the cloud.
  A. Use an AWS Storage Gateway fife gateway to provide file storage to AWS. then perform analytics on the data in the AWS Cloud.

  ---

  Explanation/Reference:

  NFS => File Gateway Since it mentions NFS protocols its should use a Storage File Gateway

  https://d1.awsstatic.com/cloud-storage/AWS-Storage-Gateway-How-it-Works-Diagram.3d8305b8c1e9c46e4579fbc341209d6d3c5d2eb4.png

• Question 645:

  A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of Its developer accounts. The company has created a central AWS account for streamlining management and audit reviews An internal auditor needs to access the CloudTrail logs, yet access needs to be restricted for all developer account users The solution must be secure and optimized How should a solutions architect meet these requirements?

  A. Configure an AWS Lambda function m each developer account to copy the log files to the central account. Create an IAM role in the central account for the auditor Attach an IAM policy providing read-only permissions to the bucket.
  B. Configure CloudTrail from each developer account to deliver the tog files to an S3 bucket in the central account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket.
  C. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account Create an IAM role in the central account for the auditor Attach an lA'.l policy providing read-only permissions to the bucket.
  D. Configure an AWS Lambda function in the central account to copy the log files from the S3 bucket in each developer account Create an IAM user in the central account for the auditor Attach an IAM policy providing full permissions to the bucket.
  C. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account Create an IAM role in the central account for the auditor Attach an lA'.l policy providing read-only permissions to the bucket.

• Question 646:

  A solutions architect is using an AWS Cloud Formation template to deploy a three-tier web application The web application consists of a web tier and an application tier that stores and retrieves user data in Amazon DynamoDB tables The web and application tiers are hosted on Amazon EC2 instances, and the database tier is not publicly accessible The application EC2 instances need to access the DynamoDB tables without exposing API credentials in the template What should the solutions architect do to meet these requirements?

  A. Create an 1AM role to read the DynamoOB tables Associate the role with the application instances by reference an instance profile
  B. Create an IAM role that has the required permissions to read and write from the DynamoOB tables Add the role to the EC2 instance profile and associate the instance profile with the apphcanon instances
  C. Use the parameter section in the AWS CkHidFormaton template to have the user input access and secret keys from an already-created IAM user mat has the required permissions to read and write from the DynamoOB tables
  D. Create an IAM user m the AWS CioudFormation template that has the required permissions to read and write from the DynamoOB tables Use the GetAti function to retrieve the access and secret keys and pass them to the application instances through the user data
  B. Create an IAM role that has the required permissions to read and write from the DynamoOB tables Add the role to the EC2 instance profile and associate the instance profile with the apphcanon instances

• Question 647:

  A company recently released a new type of internet-connected sensor. The company is expecting lo sell thousands of sensors, which are designed to stream high volumes of data each second to a central location. A solutions architect must design a solution that ingests and stores data so that engineering teams can analyze it in near-real time with millisecond responsiveness. Which solution should the solutions architect recommend?

  A. Use an Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.
  B. Use an Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.
  C. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.
  D. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.
  D. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.

  ---

  Explanation/Reference:

  Main words are: thousands of sensors, stream high volumes of data each second, solution that ingests and stores data, analyze data in near-real time, millisecond responsiveness.

  So solution ask for:

  1) ingest data,

  2) store data.

  Then solution also must be found IN THE WAY engineers can analyze data in near-real time with millisecond responsiveness.

  About ingestion no doubt about kinesis.

  About store data, redshift is a data warehousing service, not a data store service.

  Moreover lambda doesn't work with redshift while it does with dynamodb.

  Analyze meaning is different from analytics, i do a query and analyze the response, no need of a datawarehouse.

  This together with millisecond responsiveness request, carry to dynamodb.

  Redshift supports sub second response. We need millisecond response

  https://aws.amazon.com/blogs/big-data/get-sub-second-query-response-times-with-amazon-redshift-resultcaching/

  https://aws.amazon.com/blogs/big-data/detect-change-points-in-your-event-data-stream-using-amazonkinesis-data-streams-amazon-dynamodb-and-aws-lambda/

• Question 648:

  A solutions architect is designing an architecture that includes web application and database tiers The web tier must be capable of auto scaling. The solutions architect has decided to separate each tier into itsown subnets. The design includes two public subnets and four private subnets. The security team requires that tiers be able to communicate with each other only when there is a business need and that all other network traffic be blocked What should the solutions architect do to meet these requirements?

  A. Create an Amazon GuardDuty source'destmation rule set to control communication
  B. Create one security group for all tiers to limit traffic to only the required source and destinations
  C. Create specific security groups for each tier to limit traffic to only the required source and destinations
  D. Create network ACLs in all six subnets to limit traffic to the sources and destinations required for the application to function
  D. Create network ACLs in all six subnets to limit traffic to the sources and destinations required for the application to function

• Question 649:

  A solutions architect is designing a highly available website that is served by multiple web servers hosted outside of AWS. If an instance becomes unresponsive, the architect needs to remove it from the rotation. What is the MOST efficient way to fulfill this requirement?

  A. Use Amazon CloudWatch to monitor utilization.
  B. Use Amazon API Gateway to monitor availability.
  C. Use an Amazon Elastic Load Balancer.
  D. Use Amazon Route 53 health checks.
  C. Use an Amazon Elastic Load Balancer.

• Question 650:

  A company is building a website that relies on reading and writing to an Amazon DynamoDB database The website experiences high traffic during normal business hours, but the traffic declines drastically overnight and during weekends The company is concerned about operating costs

  Which solution will meet the website's traffic demands MOST cost-effectively?

  A. Enable DynamoDB Accelerator (DAX) to cache the data
  B. Enable DynamoDB auto scaling when creating the tables.
  C. Enable Multi-AZ replication for the DynamoDB database
  D. Enable DynamoDB on-demand capacity allocation when creating the tables
  D. Enable DynamoDB on-demand capacity allocation when creating the tables