Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 651:

  A company uses a popular content management system (CMS) tot its corporate website. However, the required patching and maintenance are burdensome. The company is redesigning its website and wants a new solution. The website will be updated tour times a year and does not need to have any dynamic content available The solution must provide high scalability and enhanced security.

  Which combination of changes will meet those requirements with the LEAST operational overhead? (Select TWO)

  A. Deploy an AWS WAF web ACL in front of the website to provide HTTPS functionality
  B. Create and deploy an AWS Lambda function to manage and serve the website content
  C. Create the new website and an Amazon S3 bucket Deploy the website on the S3 bucket with static website hosting enabled
  D. Create the new website. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer.
  A. Deploy an AWS WAF web ACL in front of the website to provide HTTPS functionality
  D. Create the new website. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer.

  ---

  Explanation/Reference:

• Question 652:

  A company is deploying an application that processes large quantities of data in parallel. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to prevent groups of nodes from sharing the same underlying hardware.

  Which networking solution meets these requirements?

  A. Run the EC2 instances in a spread placement group.
  B. Group the EC2 instances in separate accounts.
  C. Configure the EC2 instances with dedicated tenancy.
  D. Configure the EC2 instances with shared tenancy.
  A. Run the EC2 instances in a spread placement group.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/compute/using-partition-placement-groups-for-large-distributed-and-replicated-workloads-in-amazon-ec2/

• Question 653:

  A company wants to build a data lake on AWS from data that is stored in an onpremises Oracle relational database. The data lake must receive ongoing updates from the on-premises database.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Use AWS DataSync to transfer the data to Amazon S3. Use AWS Glue to transform the data and integrate the data into a data lake.
  B. Use AWS Snowball to transfer the data to Amazon S3. Use AWS Batch to transform the data and integrate the data into a data lake.
  C. Use AWS Database Migration Service (AWS DMS) to transfer the data to Amazon S3 Use AWS Glue to transform the data and integrate the data into a data lake.
  D. Use an Amazon EC2 instance to transfer the data to Amazon S3. Configure the EC2 instance to transform the data and integrate the data into a data lake.
  C. Use AWS Database Migration Service (AWS DMS) to transfer the data to Amazon S3 Use AWS Glue to transform the data and integrate the data into a data lake.

• Question 654:

  A company has migrated an on-premises Oracle database to an Amazon RDS (or Oracle Multi-AZ DB instance In the us-east-l Region. A solutions architect is designing a disaster recovery strategy to have the database provisioned In the uswest-2 Region In case the database becomes unavailable in the us-east-1 Region. The design must ensure the database is provisioned in the us-west-2 Region in a maximum of 2 hours, with a data loss window of no more than 3 hours. How can these requirements be met?

  A. Edit the DB instance and create a read replica in us-west-2. Promote the read replica to master In us-west-2 in case the disaster recovery environment needs to be activated.
  B. Select the multi-Region option to provision a standby instance in us-west-2. The standby Instance will be automatically promoted to master In us-west-2 in case the disaster recovery environment needs to be created.
  C. Take automated snapshots of the database instance and copy them to us-west-2 every 3 hours.Restore the latest snapshot to provision another database instance in us-west-2 in case the disaster recovery environment needs to be activated.
  D. Create a multimaster read/write instances across multiple AWS Regions Select VPCs in us-east-1 and us-west-2 lo make that deployment. Keep the master read/write instance in us-west-2 available to avoid having to activate a disaster recovery environment.
  A. Edit the DB instance and create a read replica in us-west-2. Promote the read replica to master In us-west-2 in case the disaster recovery environment needs to be activated.

• Question 655:

  A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website.

  Which actions should the solutions architect take to protect the website from such an attack? (Select TWO.)

  A. Use AWS Shield Advanced to stop the DDoS attack.
  B. Configure Amazon GuardDuty to automatically block the attackers.
  C. Configure the website to use Amazon CloudFront for both static and dynamic content.
  D. Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
  E. Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization
  A. Use AWS Shield Advanced to stop the DDoS attack.
  C. Configure the website to use Amazon CloudFront for both static and dynamic content.

  ---

  Explanation/Reference:

• Question 656:

  A company wants to minimize cost by moving infrequently accessed audit archives to low- cost storage.

  Which AWS service should the company use for this storage?

  A. AWS Backup
  B. Amazon S3 Glacier
  C. AWS Snowball
  D. AWS Storage Gateway
  B. Amazon S3 Glacier

• Question 657:

  A company runs an application on several Amazon EC2 instances that store persistent data on an Amazon Elastic File System (Amazon EFS) file system. The company needs to replicate the data to another AWS Region by using an AWS managed service solution

  Which solution will meet these requirements MOST cost-effectively'?

  A. Use the EFS-to-EFS backup solution to replicate the data to an EFS file system in another Region
  B. Run a nightly script to copy data from the EFS file system to an Amazon S3 bucket Enable S3 Cross-Region Replication on the S3 bucket
  C. Create a VPC in another Region Establish a cross-Region VPC peer Run a nightly rsync to copy data from the original Region to the new Region.
  D. Use AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region Assign the EFS file system resource to the backup plan
  D. Use AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region Assign the EFS file system resource to the backup plan

• Question 658:

  A company has deployed an API in a VPC behind an internet-facing Application Load Balancer (ALB). An application that consumes the API as a client is deployed in a second account in private subnets behind a NAT gateway. When requests to the client application increase, the NAT gateway costs are higher than expected. A solutions architect has configured the ALB to be internal.

  Which combination of architectural changes will reduce the NAT gateway costs? (Select TWO )

  A. Configure a VPC peering connection between the two VPCs. Access the API using the private address
  B. Configure an AWS Direct Connect connection between the two VPCs. Access the API using the private address.
  C. Configure a ClassicLink connection for the API into the client VPC Access the API using the ClassicLink address.
  D. Configure a PrivateLink connection for the API into the client VPC. Access the API using the PrivateLink address.
  E. Configure an AWS Resource Access Manager connection between the two accounts Access the API using the private address
  D. Configure a PrivateLink connection for the API into the client VPC. Access the API using the PrivateLink address.
  E. Configure an AWS Resource Access Manager connection between the two accounts Access the API using the private address

  ---

  Explanation/Reference:

• Question 659:

  A company is running a multi-tier web application on AWS. The application runs its database on Amazon Aurora MySQL. The application and database tiers are in the us- easily Region.

  A database administrator who monitors the Aurora DB cluster finds that an intermittent increase in read traffic is creating high CPU utilization on the read replica. The result is increased read latency for the application. The memory and disk

  utilization of the DB instance are stable throughout the event of increased latency.

  What should a solutions architect do to improve the read scalability?

  A. Reboot the DB cluster
  B. Create a cross-Region read replica
  C. Configure Aurora Auto Scaling for the read replica
  D. Increase the provisioned read IOPS for the DB instance
  B. Create a cross-Region read replica

• Question 660:

  A company's order system sends requests from clients to Amazon EC2 instances The EC2 instances process the orders and then store the orders in a database on Amazon RDS. Users report that they must reprocess orders when the system tails The company wants a resilient solution that can process orders automatically if a system outage occurs

  What should a solutions architect do to meet these requirements?

  A. Move the EC2 instances Into an Auto Scaling group. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to target an Amazon Elastic Container Service (Amazon ECS) task
  B. Move the EC2 instances into an Auto Seating group behind an Application Load Balancer (Al B) Update the order system to send message to the ALB endpoint
  C. Move the EC2 instances into an Auto Scaling group. Configure the order system to send messages to an Amazon Simple Queue Service (Amazon SGS) queue. Configure the EC2 instances to consume messages from the queue.
  D. Create an Amazon Simple Notification Service (Amazon SNS) topic. Create an AWS Lambda function, and subscribe the function to the SNS topic Configure (he order system to send messages to the SNS topic. Send a command to the EC2 instances to process the messages by using AWS Systems Manager Run Command
  C. Move the EC2 instances into an Auto Scaling group. Configure the order system to send messages to an Amazon Simple Queue Service (Amazon SGS) queue. Configure the EC2 instances to consume messages from the queue.