Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 851:

  Which AWS service or feature can be used find availability status information on all AWS services?

  A. AWS Personal Health
  B. Dashboard AWS CloudTrail
  C. AWS Service Health Dashboard
  D. Amazon CloudWatch
  A. AWS Personal Health

• Question 852:

  A company is designing a shared storage solution for a gaming application that is hosted in the AWS Cloud. The company needs the ability to use SMB clients to access data. The solution must be fully managed. Which AWS solution meets these requirements?

  A. Create an AWS DataSync task that shares the data as a mountable file system. Mount the file system to the application server.
  B. Create an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
  C. Create an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system.
  D. Create an Amazon S3 bucket. Assign an IAM role to the application to grant access to the S3 bucket. Mount the S3 bucket to the application server.
  C. Create an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/fsx/windows/

• Question 853:

  A company wants to run applications in container in the AWS Cloud. Those applications arc stateless and can tolerate disruptions. What should a solutions architect do to meet those requirements?

  What should a solution architect do to meet these requirements?

  A. Use Spot Instances in an Amazon EC2 Auto Scaling group to run the application containers
  B. Use Spot Instances in an Amazon Elastic Kubernetes Service (Amazon EKS) managed node group
  C. Use On-Demand Instances in an Amazon EC2 Auto Scaling group to run the application containers
  D. Use On-Demand Instances in an Amazon Elastic Kubernetes Service (Amazon EKS) managed node group.
  A. Use Spot Instances in an Amazon EC2 Auto Scaling group to run the application containers

• Question 854:

  A company requires operating system permission on a relational database server What should a solutions architect suggest as a configuration for a highly available database architecture?

  A. Multiple Amazon EC2 instances in a database replication configuration that uses two Availability Zones
  B. A standalone Amazon FC2 instance with a selected database installed
  C. Amazon RDS m a Multi-AZ configuration with Provisioned IOPS
  D. Multiple Amazon EC2 instances in a replication configuration that uses a placement group
  A. Multiple Amazon EC2 instances in a database replication configuration that uses two Availability Zones

• Question 855:

  A company needs to keep user transaction data in an Amazon DynamoDB table.

  The company must retain the data for 7 years.

  What is the MOST operationally efficient solution that meets these requirements?

  A. Use DynamoDB point-in-time recovery to back up the table continuously.
  B. Use AWS Backup to create backup schedules and retention policies for the table.
  C. Create an on-demand backup of the table by using the DynamoDB console. Store the backup in an Amazon S3 bucket. Set an S3 Lifecycle configuration for the S3 bucket.
  D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function. Configure the Lambda function to back up the table and to store the backup in an Amazon S3 bucket. Set an S3 Lifecycle configuration for the S3 bucket.
  C. Create an on-demand backup of the table by using the DynamoDB console. Store the backup in an Amazon S3 bucket. Set an S3 Lifecycle configuration for the S3 bucket.

• Question 856:

  A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.

  What should a solutions architect do to meet these requirements?

  A. Use AWS Key Management Service (AWS KMS) customer master keys (CMKs) to create keys.Configure the application to load the database credentials from AWS KMS Enable automatic key rotation.
  B. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.
  C. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.
  D. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter Store. Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store.
  B. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.

  ---

  Explanation/Reference:

• Question 857:

  A company has a web application that includes an embedded NoSQL database The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone.

  A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent.

  Which solution will meet these requirements with the LEAST operational overhead*?

  A. Replace the ALB with a Network Load Balancer Maintain the embedded NoSQL database with its replication service on the EC2 instances
  B. Replace the ALB with a Network Load Balancer Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).
  C. Modify the Auto Scaling group to use EC2 instances across three Availability Zones Maintain the embedded NoSQL database with its replication service on the EC2 instances.
  D. Modify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS)
  B. Replace the ALB with a Network Load Balancer Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).

• Question 858:

  A solutions architect is designing an elastic application that will have between 10 and 50 Amazon EC2 concurrent instances running depending on the load Each instance must mount storage that will read and write to the same 50 GB folder Which storage type meets the requirements?

  A. Amazon S3
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon Amazon Elastic Block Store (Amazon EBS) volumes
  D. Amazon EC2 instance store
  B. Amazon Elastic File System (Amazon EFS)

• Question 859:

  A company has an asynchronous web application where Amazon API Gateway triggers AWS Lambda functions to perform write and update operations on an Amazon RDS DB instance During periods of extreme use API Gateway and Lambda scale in response to the incoming workload but service outages occur due to congestion with Amazon RDS The company is seeking a cost-effective design to alleviate this congestion What should a solutions architect recommend'?

  A. implement RDS storage autoscaling with a larger instance type
  B. Create read replicas to alleviate me read requests on the database
  C. Use Amazon Kinesis to poll the incoming requests from API Gateway to the Lambda functions
  D. Use Amazon Simple Queue Service (Amazon SQS) to buffer the incoming requests before delivering them to the Lambda functions
  D. Use Amazon Simple Queue Service (Amazon SQS) to buffer the incoming requests before delivering them to the Lambda functions

• Question 860:

  A start-up company has a web application based in the us-east-1 Region with multiple Amazon EC2 instances running behind an Application Load Balancer across multiple Availability Zones As the company's user base grows in the us-west1 Region, it needs 3 solution with low latency and high availability.

  What should a solutions architect do to accomplish this?

  A. Provision EC2 instances in us-west-1. Switch me Application Load Balancer to a Network Load Balancer to achieve cross-Region load balancing.
  B. Provision EC2 instances and an Application Load Balancer in us-west-1 Make the load balancer distribute the traffic based on the location of the request
  C. Provision EC2 instances and configure an Application Load Balancer in us-west-1. Create an accelerator in AWS Global Accelerator that uses an endpoint group that includes the load balancer endpoints in both Regions.
  D. Provision EC2 Instances and configure an Application Load Balancer in us-wesl-1 Configure Amazon Route 53 with a weighted routing policy. Create alias records in Route 53 that point to the Application Load Balancer
  C. Provision EC2 instances and configure an Application Load Balancer in us-west-1. Create an accelerator in AWS Global Accelerator that uses an endpoint group that includes the load balancer endpoints in both Regions.

  ---

  Explanation/Reference:

  Register endpoints for endpoint groups: You register one or more regional resources, such as Application Load Balancers, Network Load Balancers, EC2 Instances, or Elastic IP addresses, in each endpoint group.

  Then you can set weights to choose how much traffic is routed to each endpoint.

  Endpoints in AWS Global Accelerator can be Network Load Balancers, Application Load Balancers,Amazon EC2 instances, or Elastic IP addresses. A static IP address serves as a single point of contact for clients, and Global Accelerator

  then distributes incoming traffic across healthy endpoints. Global Accelerator directs traffic to endpoints by using the port (or port range) that you specify for the listener that the endpoint group for the endpoint belongs to.

  Each endpoint group can have multiple endpoints. You can add each endpoint to multiple endpoint groups, but the endpoint groups must be associated with different listeners.

  Global Accelerator continually monitors the health of all endpoints that are included in an endpoint group. It routes traffic only to the active endpoints that are healthy. If Global Accelerator doesn ג€™t have any healthy endpoints to route traffic

  to, it routes traffic to all endpoints.

  Reference:

  https://docs.aws.amazon.com/global-accelerator/latest/dg/about-endpoints.html

  https://aws.amazon.com/global-accelerator/faqs/