Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 931:

  A company has an application that posts messages to Amazon SQS Another application polls the queue and processes the messages in an l/O-intensive operation The company has a service level agreement (SLA) that specifies the maximum amount of time that can elapse between receiving the messages and responding to the users Due to an increase in the number of messages the company has difficulty meeting its SLA consistently. What should a solutions architect do to help improve the application's processing time and ensure it can handle the load at any level?

  A. Create an Amazon Machine Image (AMI) from the instance used for processing Terminate the instance and replace it with a larger size.
  B. Create an Amazon Machine Image (AMI) from the instance used for processing Terminate the instance and replace it with an Amazon EC2 Dedicated Instance
  C. Create an Amazon Machine image (AMI) from the instance used for processing Create an Auto Scaling group using this image in its launch configuration Configure the group with a target tracking policy to keep us aggregate CPU utilization below 70%
  D. Create an Amazon Machine Image (AMI) from the instance used for processing Create an Auto Scaling group using this image in its launch configuration Configure the group with a target tracking policy based on the age of the oldest message in the SQS queue
  B. Create an Amazon Machine Image (AMI) from the instance used for processing Terminate the instance and replace it with an Amazon EC2 Dedicated Instance

• Question 932:

  A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis An application on an Amazon EC2 instance needs permission to efficiently process the CSV data stored in the S3 bucket.

  Which action will MOST securely grant the EC2 instance access to the S3 bucket?

  A. Attach a resource-based policy to the S3 bucket
  B. Create an IAM user for the application with specific permissions to the S3 bucket
  C. Associate an IAM role with least privilege permissions to the EC2 instance profile
  D. Store AWS credentials directly on the EC2 instance for applications on the instance to use for API calls
  C. Associate an IAM role with least privilege permissions to the EC2 instance profile

  ---

  Explanation/Reference:

• Question 933:

  A company wants to deploy a new public web application on AWS The application includes a web server tier that uses Amazon EC2 instances The application also includes a database tier that uses an Amazon RDS for MySQL DB instance

  The application must be secure and accessible for global customers that have dynamic IP addresses

  How should a solutions architect configure the security groups to meet these requirements'?

  A. Configure the security group tor the web servers lo allow inbound traffic on port 443 from 0.0.0. 0/0) Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers
  B. Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers Configure the security group for the DB instance lo allow inbound traffic on port 3306 from the security group of the web servers
  C. Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers
  D. Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0.0 Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0)
  A. Configure the security group tor the web servers lo allow inbound traffic on port 443 from 0.0.0. 0/0) Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers

• Question 934:

  A company is designing a new web application that the company will deploy into a single AWS Region. The application requires a two-tier architecture that will include Amazon EC2 instances and an Amazon RDS DB instance. A solutions architect needs to design the application so that all components are highly available.

  Which solution will meet these requirements MOST cost-effectively?

  A. Deploy EC2 instances in an additional Region. Create a DB instance with the Multi-AZ option activated.
  B. Deploy all EC2 instances in the same Region and the same Availability Zone. Create a DB instance with the Multi-AZ option activated.
  C. Deploy EC2 instances across at least two Availability Zones within the same Region. Create a DB instance in a single Availability Zone.
  D. Deploy EC2 instances across at least two Availability Zones within the same Region. Create a DB instance with the Multi-AZ option activated.
  D. Deploy EC2 instances across at least two Availability Zones within the same Region. Create a DB instance with the Multi-AZ option activated.

  ---

  Explanation/Reference:

• Question 935:

  Which of the following AWS services can be used to define alarms to trigger on a certain actMty, such as actMty success, failure, or delay in AWS Data Pipeline?

  A. Amazon SES
  B. Amazon CodeDepIoy
  C. Amazon SNS
  D. Amazon SQS
  C. Amazon SNS

  ---

  Explanation/Reference:

  In AWS Data Pipeline, you can define Amazon SNS alarms to trigger on actMties such as success, failure, or delay by creating an alarm object and referencing it in the onFaiI, onSuccess, or onLate slots of the actMty object. Reference: https://aws.amazon.com/datapipe|ine/faqs/

• Question 936:

  A company runs analytics software on Amazon EC2 instances The software accepts job requests from users to process data that has been uploaded to Amazon S3 Users report that some submitted data is not being processed Amazon CloudWatch reveals that the EC2 instances have a consistent CPU utilization at or near 100% The company wants to improve system performance and scale the system based on user load

  What should a solutions architect do to meet these requirements?

  A. Create a copy of the instance Place all instances behind an Application Load Balancer
  B. Create an S3 VPC endpointt for Amazon S3 Update the software to reference the endpoint.
  C. Stop the EC2 instances Modify the instance type to one with a more powerful CPU and more memory Restart the instances
  D. Route incoming requests to Amazon Simple Queue Service (Amazon SQS) Configure an EC2 Auto Scaling group based on queue size Update the software to read from the queue
  C. Stop the EC2 instances Modify the instance type to one with a more powerful CPU and more memory Restart the instances

  ---

  Explanation/Reference:

• Question 937:

  A company is developing a new online gaming application The application will run on Amazon EC2 instances in multiple AWS Regions and will have a high number of globally distributed users A solutions architect must design the application to optimize network latency for the users.

  Which actions should the solutions architect take to meet these requirements? (Select TWO )

  A. Configure AWS Global Accelerator Create Regional endpoint groups in each Region where an EC2 fleet is hosted
  B. Create a content delivery network (CDN) by using Amazon CloudFront Enable caching for static and dynamic content, and specify a high expiration period
  C. Integrate AWS Client VPN into the application Instruct users to select which Region is closest to them after they launch the application Establish a VPN connection to that Region
  D. Create an Amazon Route 53 weighted routing policy Configure the routing policy to give the highest weight to the EC2 instances in the Region that has the largest number of users.
  E. Configure an Amazon API Gateway endpoint in each Region where an EC2 fleet is hosted Instruct users to select which Region is closest to them after they launch the application Use the API Gateway endpoint that is closest to them
  A. Configure AWS Global Accelerator Create Regional endpoint groups in each Region where an EC2 fleet is hosted
  B. Create a content delivery network (CDN) by using Amazon CloudFront Enable caching for static and dynamic content, and specify a high expiration period

• Question 938:

  A company runs batch processes on Amazon EC2 instances that are needed only during business hours These processes must preserve the data at alt times but the speed of processing is not important The company needs to run these processes in the MOST cost- effective manner

  Which solution will meet these requirements?

  A. Use EC2 Reserved Instances with the All Upfront payment option
  B. Use EC2 Reserved instances with the Partial Upfront payment option
  C. Use Spot Fleet requests with the allocation strategy set to lowestPnce
  D. Use persistent Spot Instance requests with behaviour that stops interrupted instances
  B. Use EC2 Reserved instances with the Partial Upfront payment option

• Question 939:

  A company has established a new AWS account. The account is newly provisioned and no changed have been made to the default settings. The company is concerned about the security of the AWS account root user.

  What should be done to secure the root user?

  A. Create IAM users for daily administrative tasks Disable the root user.
  B. Create IAM users for daily administrative tasks Enable multi-factor authentication on the root user.
  C. Generate an access key for the root user. Use the access key for daily administration tasks instead of the AWS Management Console.
  D. Provide the root user credentials to the most senior solution architect. Have the solution architect use the root user for daily administration tasks.
  B. Create IAM users for daily administrative tasks Enable multi-factor authentication on the root user.

• Question 940:

  A company recently deployed a new auditing system to centralize information about operating system versions, patching, and installed software for Amazon EC2 instances. A solutions architect must ensure all instances provisioned through

  EC2 Auto Scaling groups successfully send reports to the auditing system as soon as they are launched and terminated.

  Which solution achieves these goals MOST efficiently?

  A. Use a scheduled AWS Lambda function and execute a script remotely on all EC2 instances to send data to the audit system.
  B. Use EC2 Auto Scaling lifecycle hooks to execute a custom script to send data to the audit system when instances are launched and terminated.
  C. Use an EC2 Auto Scaling launch configuration to execute a custom script through user data to send data to the audit system when instances are launched and terminated.
  D. Execute a custom script on the instance operating system to send data to the audit system.Configure the script to be executed by the EC2 Auto Scaling group when the instance starts and is terminated.
  B. Use EC2 Auto Scaling lifecycle hooks to execute a custom script to send data to the audit system when instances are launched and terminated.