Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 791:

  A company is using various types of Amazon EC2 On-Demand Instances The company suspects that these instances have greater CPU and memory capacity than its workloads require Which actions should the company take to obtain recommendations to optimize cost? (Select TWO.)

  A. Use AWS Trusted Advisor for instance type recommendations
  B. Use AWS Compute Optimizer for instance type recommendations
  C. Use AWS Budgets for instance type recommendations
  D. Use Cost Explorer rightsizing recommendations
  E. Use Amazon Inspector to identify underutilized EC2 instances.
  A. Use AWS Trusted Advisor for instance type recommendations
  D. Use Cost Explorer rightsizing recommendations

• Question 792:

  A company wants to perform an online migration of active datasets from an on-premises NFS server to an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. Data integrity verification is required during the transfer and at the end of

  the transfer. The data also must be encrypted.

  A solutions architect is using an AWS solution to migrate the data.

  Which solution meets these requirements?

  A. AWS Storage Gateway file gateway
  B. S3 Transfer Acceleration
  C. AWS DataSync
  D. AWS Snowball Edge Storage Optimized
  C. AWS DataSync

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/storage/transferring-data-between-aws-accounts-using-aws-datasync/

• Question 793:

  A company wants to replicate its data to AWS to recover in the event of a disaster. Today, a system administrator has scripts that copy data to a NFS share Individual backup files need to be accessed with low latency by application administrators to deal with errors in processing.

  What should a solutions architect recommend to meet these requirements?

  A. Modify the script to copy data to an Amazon S3 bucket instead of the on-premises NFS share
  B. Modify the script to copy data to an Amazon S3 Glacier Archive instead of the on-premises NFS share
  C. Modify the script to copy data to an Amazon Elastic File System (Amazon EFS) volume instead of the on-premises NFS share.
  D. Modify the script to copy data to an AWS Storage Gateway for File Gateway virtual appliance instead of the on-premises NFS share.
  C. Modify the script to copy data to an Amazon Elastic File System (Amazon EFS) volume instead of the on-premises NFS share.

  ---

  Explanation/Reference:

• Question 794:

  A product manager of an ecommerce website is launching a new product line next month. The application hosting the website runs on Amazon EC2 instances in an Auto Scaling group behind a load balancer. Testing has been performed, and the maximum load at launch has been estimated. Traffic to the application is expected to decrease gradually within the first few weeks after the launch. This workload is the only one on this account that is expected to scale during launch. Which combination of steps is MOST cost-effective to ensure that will be adequate capacity when the application scales at launch? (Select TWO.)

  A. Purchase Reserved instance (RIs) with zonal scope to reserve capacity and get the discount to compute. Then cancel the Ris after the launch.
  B. Contact AWS to reserve hardware in the AWS Region that will be near the most users.
  C. Check the EC2 service quotas on the account, and request an increase if the values are lower than the expected load at launch.
  D. Purchase Scheduled instances to reserve capacity for the launch, and run them on a daily schedule during peak capacity hours.
  A. Purchase Reserved instance (RIs) with zonal scope to reserve capacity and get the discount to compute. Then cancel the Ris after the launch.
  D. Purchase Scheduled instances to reserve capacity for the launch, and run them on a daily schedule during peak capacity hours.

• Question 795:

  An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format The company is evaluating a disaster recovery solution to back up the

  data.

  The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.

  Which solution meets these requirements MOST cost-effectively?

  A. Amazon Elasticsearch Service (Amazon ES)
  B. Amazon S3 Glacier
  C. Amazon S3 Standard
  D. Amazon RDS for PostgreSQL
  C. Amazon S3 Standard

  ---

  Explanation/Reference:

• Question 796:

  An online learning company is migrating to the AWS Cloud. The company maintains its student records in a PostgreSQL database. The company needs a solution in which its data is available and online across multiple AWS Regions at all times.

  Which solution will meet these requirements with the LEAST amount of operational overhead?

  A. Migrate the PostgreSQL database to a PostgreSQL cluster on Amazon EC2 instances.
  B. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance with the Multi-AZ feature turned on.
  C. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region.
  D. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Set up DB snapshots to be copied to another Region.
  C. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region.

  ---

  Explanation/Reference:

• Question 797:

  A company wants to optimize the cost of its data storage for data that is accessed quarterly. The company requires high throughput, low latency, and rapid access, when needed Which Amazon S3 storage class should a solutions architect recommend?

  A. Amazon S3 Glacier (S3 Glacier)
  B. Amazon S3 Standard (S3 Standard)
  C. Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering)
  D. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
  C. Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering)

• Question 798:

  A company designs a mobile app for its customers to upload photos to a website. The app needs a secure login with multi-factor authentication (MFA). The company wants to limit the initial build time and the maintenance of the solution. Which solution should a solutions architect recommend to meet these requirements?

  A. Use Amazon Cognito Identity with SMS-based MFA.
  B. Edit IAM policies to require MFA for all users.
  C. Federate IAM against the corporate Active Directory that requires MFA.
  D. Use Amazon API Gateway and require server-side encryption (SSE) for photos.
  A. Use Amazon Cognito Identity with SMS-based MFA.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/cognito/

• Question 799:

  A company is planning to migrate to AWS. The network layout will include more than 1.000 VPCs in a single AWS Region The resources in the VPCs need to communicate with each other

  What should a solutions architect recommend to meet these requirements?

  A. Create VPN tunnels from all the VPCs to each other Enable route propagation
  B. Create an AWS Direct Connect gateway and attach a public virtual interface (VIF) to each VPC Enable route propagation
  C. Peer all the VPCs together by creating and accepting peering requests Update route tables with the new routes
  D. Create a transit gateway and place attachments m subnets of all the VPCs Configure a transit gateway route table with the new routes
  A. Create VPN tunnels from all the VPCs to each other Enable route propagation

• Question 800:

  An application launched on Amazon EC2 instances needs to publish personally identifiable information (PH) about customers using Amazon Simple Notification Service (Amazon SNS) The application is launched in private subnets within an Amazon VPC. What is the MOST secure way to allow the application to access service endpoints in the same AWS Region?

  A. Use an internet gateway
  B. Use AWS PrivateLink
  C. Use a NAT gateway.
  D. Use a proxy instance
  B. Use AWS PrivateLink