Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 841:

  A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.

  What should a solutions architect recommend to meet these requirements?

  A. Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic.
  B. Migrate the files to each clinic's on-premises applications by using AWS DataSync for processing
  C. Deploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.
  D. Attach an Amazon Elastic File System (Amazon EFS) file system to each clinic's on-premises servers
  A. Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic.

• Question 842:

  A company with multiple accounts and teams wants to set up a new multi-account AWS environment. Which AWS service supports this requirement?

  A. AWS CloudFormation
  B. AWS Control Tower
  C. AWS Config
  D. Amazon Virtual Private Cloud (Amazon VPC)
  B. AWS Control Tower

• Question 843:

  A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application. What should a solutions architect do to meet these requirements?

  A. Create an Amazon S3 Standard bucket with access to the web servers.
  B. Configure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.
  C. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.
  D. Configure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.
  C. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.

• Question 844:

  A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications In an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3 The company then will use the data m Amazon S3 to provide near-real time updates in a dashboard The solution must not affect the speed of EC2 instance launches.

  How should the company move the data to Amazon S3 to meet these requirements?

  A. Use an Amazon CioudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose Store the data in Amazon S3
  B. Launch an Amazon EMR duster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose Store the data in Amazon S3
  C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda (unction on a schedule Configure the Lambda function to send the EC2 Auto Scaling status data directly to Amazon S3
  D. Use a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent Configure Kinesis Agent to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose Store the data in Amazon S3
  B. Launch an Amazon EMR duster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose Store the data in Amazon S3

• Question 845:

  A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deploying on Amazon EC2 instances behind an Application Load balancer in an Auto Scaling group. The company needs the ability shift traffic from resources in one region to another.

  What should a solutions architect recommend?

  A. Configure an Amazon Route 53 latency routing policy
  B. Configure an Amazon Route 53 geolocation routing policy
  C. Configure an Amazon Route 53 geoproximity routingpolicy.
  D. Configure an Amazon Route 53 multivalue answer routing policy
  C. Configure an Amazon Route 53 geoproximity routingpolicy.

  ---

  Explanation/Reference:

  Geoproximity routing policy ?Use when you want to route traffic based on the location of your resources and, optionally," shift traffic from resources in one location to resources in another". Using "Bias" you can expand or shrink size of the geographic region and shift traffic from one geographic region to another. To optionally change the size of the geographic region from which Route 53 routes traffic to a resource, specify the applicable value for the bias: To expand the size of the geographic region from which Route 53 routes traffic to a resource, specify a positive integer from 1 to 99 for the bias. Route 53 shrinks the size of adjacent regions. To shrink the size of the geographic region from which Route 53 routes traffic to a resource, specify a negative bias of -1 to -99. Route 53 expands the size of adjacent regions.

  https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

• Question 846:

  A solutions architect must create a highly available bastion host architecture. The solution needs to be resilient within a single AWS Region and should require only minimal effort to maintain.

  What should the solutions architect do to meet these requirements?

  A. Create a Network Load Balancer backed by an Auto Scaling group with a UDP listener.
  B. Create a Network Load Balancer backed by a Spot Fleet with instances in a group with instances in a partition placement group.
  C. Create a Network Load Balancer backed by the existing serves in different Availability Zones as the target.
  D. Create a Network Load Balancer backed by an Auto Scaling with instances in multiple Availability zones as the target
  D. Create a Network Load Balancer backed by an Auto Scaling with instances in multiple Availability zones as the target

  ---

  Explanation/Reference:

• Question 847:

  A company has a stateless web application that runs on AWS Lambda functions that are invoked by Amazon API Gateway. The company wants to deploy the application across multiple AWS Regions to provide Regional failover capabilities. What should a solutions architect do to route traffic to multiple Regions?

  A. Configure Amazon Route 53 health checks for each Region. Use an active-active failover configuration.
  B. Create an Amazon CloudFront distribution with an origin for each Region. Use CloudFront health checks to route traffic.
  C. Create an AWS Transit Gateway Attach the transit gateway to the API Gateway endpoint in each Region Configure the transit gateway to route requests.
  D. Use AWS Global Accelerator to create an accelerator with endpoints in each Region. Allow Global Accelerator to automatically monitor the health of endpoints and route requests.
  A. Configure Amazon Route 53 health checks for each Region. Use an active-active failover configuration.

• Question 848:

  A company is processing data on a daily basis. The results of the operations are stored in an Amazon S3 bucket analyzed daily for one week and then must remain immediately accessible for occasional analysis What is the MOST cost-effective storage solution alternative to the current configuration?

  A. Configure a lifecycle policy to delete the objects after 30 days.
  B. Configure a lifecycle policy to transition the objects to Amazon S3 Glacier after 30 days
  C. Configure a lifecycle policy to transition the objects to Amazon S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days
  D. Configure a lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days
  D. Configure a lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days

• Question 849:

  A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files A solutions architect needs to implement a highly available SFTP solution that minimizes operational overhead. Which solution will meet these requirements?

  A. Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint Choose the S3 data lake as the destination
  B. Use Amazon S3 File Gateway as an SFTP server Expose the S3 File Gateway endpoint URL to the new partner Share the S3 File Gateway endpoint with the new partner
  C. Launch an Amazon EC2 instance in a private subnet in a VPC Instruct the new partner to upload files to the EC2 instance by using a VPN Run a cron job script on the EC2 instance to upload files to the S3 data lake
  D. Launch Amazon EC2 instances in a private subnet in a VPC Place a Network Load Balancer (NLB) in front of the EC2 instances Create an SFTP listener port for the NLB Share the NLB hostname with the new partner. Run a cron job script on the EC2 instances to upload files to the S3 data lake
  A. Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint Choose the S3 data lake as the destination

• Question 850:

  A company deploys Amazon EC2 instances that run in a VPC The EC2 instances load source data into Amazon S3 buckets so that the data can be processed in the future According to compliance laws, the data must not be transmitted over the public internet Servers in the company's on-premises data center will consume the output from an application that runs on the EC2 instances

  Which solution will meet these requirements?

  A. Deploy an interface VPC endpoint for Amazon EC2 Create an AWS Site-to-Site VPN connection between the company and the VPC
  B. Deploy a gateway VPC endpoint for Amazon S3 Set up an AWS Direct Connect connection between the on-premises network and the VPC
  C. Set up an AWS Transit Gateway connection from the VPC to the S3 buckets Create an AWS Site-to- Site VPN connection between the company and the VPC
  D. Set up proxy EC2 instances that have routes to NAT gateways Configure the proxy EC2 instances to fetch S3 data and feed the application instances
  A. Deploy an interface VPC endpoint for Amazon EC2 Create an AWS Site-to-Site VPN connection between the company and the VPC