Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 911:

  A company runs multiple Amazon EC2 Linux instances in a VPC with applications that use a hierarchical directory structure. The applications need to rapidly and concurrently read and write to shared storage How can this be achieved?

  A. Create an Amazon EFS file system and mount it from each EC2 instance.
  B. Create an Amazon S3 bucket and permit access from all the EC2 instances in the VPC.
  C. Create a file system on an Amazon EBS Provisioned IOPS SSD (io1) volume. Attach the volume to all the EC2 instances.
  D. Create file systems on Amazon EBS volumes attached to each EC2 instance. Synchronize the Amazon EBS volumes across the different EC2 instances.
  A. Create an Amazon EFS file system and mount it from each EC2 instance.

• Question 912:

  A gaming company is using Amazon DynamoDB to run a high-score leaderboard and record the game progress for users The company is launching a new game that is expected to be active for years The database activity at launch cannot

  be predicted; but it is expected to stabilize after 4 weeks Currently, the company is using on-demand capacity mode for processing reads and writes on all DynamoDB tables.

  What is the MOST cost-effective way for the company to control the DynamoDB capacity during the new game launch?

  A. Use on-demand mode and purchase DynamoDB reserved capacity for the first 4 weeks of the game launch
  B. Use provisioned capacity mode, and purchase DynamoDB reserved capacity for the first 4 weeks of the game launch
  C. Use provisioned capacity mode for the game launch, switch back to on-demand mode after 4 weeks, and then purchase DynamoDB reserved capacity
  D. Use on-demand mode for the game launch, switch to provisioned capacity mode after 4 weeks and then purchase DynamoDB reserved capacity
  D. Use on-demand mode for the game launch, switch to provisioned capacity mode after 4 weeks and then purchase DynamoDB reserved capacity

• Question 913:

  A company has a mobile game that reads most of its metadata from an Amazon RDS DB instance As the game increased in popularity developers noticed slowdowns related to the game's metadata load times Performance metrics indicate that simply scaling the database will not help A solutions architect must explore all options that include capabilities for snapshots replication and sub- millisecond response times What should the solutions architect recommend to solve these issues?

  A. Migrate the database to Amazon Aurora with Aurora Replicas
  B. Migrate the database to Amazon DyramoDB with global tables
  C. Add an Amazon ElastiCache for Redis layer in front of the database.
  D. Add an Amazon ElastiCache for Memcached layer in front of the database
  B. Migrate the database to Amazon DyramoDB with global tables

• Question 914:

  A company has a website hosted on AWS The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS.

  What should a solutions architect do to meet this requirement?

  A. Update the ALB's network ACL to accept only HTTPS traffic
  B. Create a rule that replaces the HTTP in the URL with HTTPS.
  C. Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.
  D. Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI).
  C. Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.

• Question 915:

  A company has three VPCs named Development, Testing and Production in the us-east-1 Region. The three VPCs need to be connected to an on-premises data center and are designed to be separate to maintain security and prevent any resource sharing A solutions architect needs to find a scalable and secure solution.

  What should the solutions architect recommend?

  A. Create an AWS Direct Connect connection and a VPN connection for each VPC to connect back to the data center.
  B. Create VPC peers from all the VPCs to the Production VPC Use an AWS Direct Connect connection from the Production VPC back to the data center
  C. Connect VPN connections from all the VPCs to a VPN in the Production VPC. Use a VPN connection from the Production VPC back to the data center
  D. Create a new VPC called Network Within the Network VPC create an AWS Transit Gateway with an AWS Direct Connect connection back to the data center Attach all the other VPCs to the Network VPC.
  D. Create a new VPC called Network Within the Network VPC create an AWS Transit Gateway with an AWS Direct Connect connection back to the data center Attach all the other VPCs to the Network VPC.

  ---

  Explanation/Reference:

• Question 916:

  A company is working with an external vendor that requires write access to the company's Amazon Simple Queue Service (Amazon SQS) queue. The vendor has its own AWS account. What should a solutions architect do to implement least privilege access?

  A. Update the permission policy on the SQS queue to give write access to the vendor's AWS account.
  B. Create an IAM user with write access to the SQS queue and share the credentials for the IAM user.
  C. Update AWS Resource Access Manager to provide write access to the SQS queue from the vendor's AWS account.
  D. Create a cross-account role with access to all SQS queues and use the vendor's AWS account in the trust document for the role
  D. Create a cross-account role with access to all SQS queues and use the vendor's AWS account in the trust document for the role

• Question 917:

  A solution architect must design a solution that uses Amazon CloudFront with an Amazon S3 to store a static website. The company security policy requires that all websites traffic be inspected by AWS WAF.

  How should the solution architect company with these requirements?

  A. Configure an S3 bucket policy to accept requests coming from the AWS WAF Amazon Resource Name (ARN) only
  B. Configure Amazon CloudFront to forward all incoming requests to AWS WAF before requesting content from the S3 origin,
  C. Configure a security group that allows Amazon CloudFront IP addresses to access Amazon S3 only Associate AWS WAF to CloudFront.
  D. Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket. Enable AWS WAF on the distribution.
  D. Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket. Enable AWS WAF on the distribution.

  ---

  Explanation/Reference:

• Question 918:

  A company captures clickstream data from multiple websites and analyzes it using batch processing. The data is loaded nightly into Amazon Redshift and is consumed by business analysts. The company wants to move towards near-realtime data processing for timely insights. The solution should process the streaming data with minimal effort and operational overhead. Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)

  A. Amazon EC2
  B. AWS Lambda
  C. Amazon Kinesis Data Streams
  D. Amazon Kinesis Data Firehose
  E. Amazon Kinesis Data Analytics
  B. AWS Lambda
  D. Amazon Kinesis Data Firehose

  ---

  Explanation/Reference:

  Kinesis Data Streams and Kinesis Client Library (KCL) -Data from the data source can be continuously captured and streamed in near real-time using Kinesis Data Streams. With the Kinesis Client Library (KCL), you can build your own application that can preprocess the streaming data as they arrive and emit the data for generating incremental views and downstream analysis. Kinesis Data Analytics This service provides the easiest way to process the data that is streaming through Kinesis Data Stream or Kinesis Data Firehose using SQL. This enables customers to gain actionable insight in near real-time from the incremental stream before storing it in Amazon S3.

  

  https://d1.awsstatic.com/whitepapers/lambda-architecure-on-for-batch-aws.pdf

• Question 919:

  A company recently released a new type of internet-connected sensor. The company is expecting to sell thousands of sensors, which are designed to stream high volumes of data each second to a central location. A solutions architect must design a solution that ingests and stores data so that engineering teams can analyse it in near-real time with millisecond responsiveness.

  Which solution should the solution architect recommend?

  A. Use an Amazon SOS queue to ingest the data. Consume the data with an AWS Lambda function which then stores the data in Amazon Redshift
  B. Use on Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function which then stores the data In Amazon DynamoDB
  C. Use Amazon Kinases Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data m Amazon Redshift
  D. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data m Amazon DynamoDB
  C. Use Amazon Kinases Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data m Amazon Redshift

• Question 920:

  A company hosts an application used to upload files to an Amazon S3 bucket Once uploaded, the files are processed to extract metadata, which takes less than 5 seconds. The volume and frequency of the uploads vanes from a few files

  each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost effective architecture that will meet these requirements.

  What should the solutions architect recommend?

  A. Configure AWS CloudTrail trails to log S3 API calls Use AWS AppSync to process the files
  B. Configure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files.
  C. Configure Amazon Kinesis Data Streams to process and send data to Amazon S3 Invoke an AWS Lambda function to process the files
  D. Configure an Amazon Simple Notification Service (Amazon SNS) topic to process the files uploaded to Amazon S3. Invoke an AWS Lambda function to process the files.
  B. Configure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files.