Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 941:

  A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store its data and wants to build a new service that sends an alert to the managers of four internal teams every time a new weather event is recorded The company does not want this new service to affect the performance of the current application

  What should a solutions architect do to meet these requirements with the LEAST amount of operational overhead?

  A. Use DynamoDB transactions to write new event data to the table Configure the transactions to notify internal teams.
  B. Have the current application publish a message to four Amazon Simple Notification Service (Amazon SNS) topics. Have each team subscribe to one topic.
  C. Enable Amazon DynamoDB Streams on the table Use triggers to write to a Mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe
  D. Add a custom attribute to each record to flag new items Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SQS) queue to which the teams can subscribe
  C. Enable Amazon DynamoDB Streams on the table Use triggers to write to a Mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe

  ---

  Explanation/Reference:

• Question 942:

  A company wants to provide users with access lo AWS resources. The company has 1.500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network However, the company does not want users to have to maintain another identity to access the resources A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources

  What should the solutions architect do to meet these requirements?

  A. Create an IAM user for each user in the company Attach the appropriate policies to each user
  B. Use Amazon Cognito with an Active Directory user pool Create rotes with the appropriate policies attached
  C. Define cross-account roles with the appropriate policies attached Map the roles to the Active Directory groups
  D. Configure Security Assertion Markup Language (SAML) 2 0-based federation Create roles with the appropriate policies attached Map the roles to the Active Directory groups
  D. Configure Security Assertion Markup Language (SAML) 2 0-based federation Create roles with the appropriate policies attached Map the roles to the Active Directory groups

  ---

  Explanation/Reference:

• Question 943:

  A company has deployed an internal API in a VPC behind an internet-facing Application Load Balancer (ALB). An application that consumes the API as a client is deployed in a VPC in a second account The application is deployed in private subnets behind a NAT gateway. When requests to the client application increase, the NAT gateway costs are higher than expected.

  Which combination of architectural changes will reduce the NAT gateway costs? (Select TWO.)

  A. Configure a VPC peering connection between the two VPCs.
  B. Configure an AWS Direct Connect connection between the two VPCs.
  C. Replace the internet-facing ALB with an internal ALB. Access the API by using the ALB's private DNS address.
  D. Configure a ClassicLink connection for the API to the client VPC. Access the API by using the ClassicLink address.
  E. Configure an AWS Resource Access Manager connection between the two accounts.Access the API by using the ALB's private DNS address.
  A. Configure a VPC peering connection between the two VPCs.
  E. Configure an AWS Resource Access Manager connection between the two accounts.Access the API by using the ALB's private DNS address.

• Question 944:

  A company has an ecommerce checkout workflow that writes an order to a database and calls a service to process the payment. Users are experiencing timeouts during the checkout process. When users resubmit the checkout form, multiple unique orders are created for the same desired transaction.

  How should a solutions architect refactor this workflow to prevent the creation of multiple orders?

  A. Configure the web application to send an order message to Amazon Kinesis Data Firehose. Set the payment service to retrieve the message from Kinesis Data Firehose and process the order.
  B. Create a rule in AWS CloudTrail to invoke an AWS Lambda function based on the logged application path request Use Lambda to query the database, call the payment service, and pass in the order information.
  C. Store the order in the database. Send a message that includes the order number to Amazon Simple Notification Service (Amazon SNS). Set the payment service to poll Amazon SNS. retrieve the message, and process the order.
  D. Store the order in the database. Send a message that includes the order number to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the payment service to retrieve the message and process the order. Delete the message from the queue.
  D. Store the order in the database. Send a message that includes the order number to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the payment service to retrieve the message and process the order. Delete the message from the queue.

• Question 945:

  A company has a stateless asynchronous application that runs in an Apache Hadoop cluster The application is invoked on demand to run extract, transform and load (ETL) jobs several limes a day

  A solutions architect needs to migrate this application to the AWS Cloud by designing an Amazon EMR cluster for the workload. The cluster must be available immediately to process jobs.

  Which implementation meets these requirements MOST cost-effectively?

  A. Use zonal Reserved Instances for the master nodes and the ewe nodes Use a Spot Fleet lor tire task nodes
  B. Use zonal Reserved Instances for the master nodes Use Spot instances for the core nodes and the task nodes
  C. Use regional Reserved Instances for the master nodes Use a Spot Fleer for the core nodes and the task nodes
  D. Use regional Reserved Instances for the master nodes. Use On-Demand Capacity Reservations for the core nodes and the task nodes.
  A. Use zonal Reserved Instances for the master nodes and the ewe nodes Use a Spot Fleet lor tire task nodes

• Question 946:

  A company hosts more than 300 global websites and applications. The company requires a platform to analyze more than 30 TB of clickstream data each day. What should a solutions architect do to transmit and process the clickstream data?

  A. Design an AWS Data Pipeline to archive the data to an Amazon S3 bucket and run an Amazon EMR cluster with the data to generate analytics.
  B. Create an Auto Scaling group of Amazon EC2 instances to process the data and send it to an Amazon S3 data lake for Amazon Redshift to use for analysis.
  C. Cache the data to Amazon CloudFront. Store the data in an Amazon S3 bucket. When an object is added to the S3 bucket, run an AWS Lambda function to process the data for analysis.
  D. Collect the data from Amazon Kinesis Data Streams. Use Amazon Kinesis Data firehose to transmit the data to an Amazon S3 data lake. Load the data in Amazon Redshift for analysis.
  D. Collect the data from Amazon Kinesis Data Streams. Use Amazon Kinesis Data firehose to transmit the data to an Amazon S3 data lake. Load the data in Amazon Redshift for analysis.

  ---

  Explanation/Reference:

• Question 947:

  A company has an application that processes customer of tiers. The company hosts the application on an Amazon EC2 instance that saves the orders to an Amazon Aurora database. Occasionally when traffic Is high, the workload does not process orders fast enough.

  What should a solutions architect do to write the orders reliably to the database as quickly as possible?

  A. Increase the instance size of the EC2 instance when baffle Is high. Write orders to Amazon Simple Notification Service (Amazon SNS) Subscribe the database endpoint to the SNS topic
  B. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read born the SQS queue and process orders into the database
  C. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic. Use EC2 ^stances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.
  D. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU threshold limits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database
  B. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read born the SQS queue and process orders into the database

  ---

  Explanation/Reference:

• Question 948:

  A company's website provides users with downloadable historical performance reports. The website needs a solution that will scale to meet the company's website demands globally. The solution should be cost effective, limit the?

  provisioning of Into and provide the fastest possible response time.

  Which combination should a solutions architect recommend to meet these requirements?

  A. Amazon CloudFront and Amazon S3
  B. AWS Lambda and Amazon Dynamo
  C. Application Load Balancer with Amazon EC2 Auto Scaling
  D. Amazon Route 53 with internal Application Load Balances
  A. Amazon CloudFront and Amazon S3

• Question 949:

  A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data in Amazon RDS MySQL Multi-AZ DB instances The EC2 instances are in public subnets, and the RDS DB instances are in private subnets. The security team has mandated that the DB instances be secured against web-based attacks.

  What should a solutions architect recommend?

  A. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Configure the EC2 instance iptables rules to drop suspicious web traffic Create a security group for the DB instances Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.
  B. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Move DB instances to the same subnets that EC2 instances are located in. Create a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances
  C. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Create a security group for the web application servers and a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the web application server security group.
  D. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Configure the Auto Scaling group lo automatically create new DB instances under heavy traffic Create a security group for the RDS DB instances. Configure the RDS security group to only allow port 3306 inbound
  C. Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Create a security group for the web application servers and a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the web application server security group.

  ---

  Explanation/Reference:

• Question 950:

  A company has an application that runs on Amazon EC2 instances within a private subnet in a VPC The instances access data in an Amazon S3 bucket in the same AWS Region. The VPC contains a NAT gateway in a public subnet to access the S3 bucket The company wants to reduce costs by replacing the NAT gateway without compromising security or redundancy

  Which solution meets these requirements?

  A. Replace the NAT gateway with a NAT instance
  B. Replace the NAT gateway with an internet gateway.
  C. Replace the NAT gateway with a gateway VPC endpoint
  D. Replace the NAT gateway with an AWS Direct Connect connection
  C. Replace the NAT gateway with a gateway VPC endpoint

  ---

  Explanation/Reference: