SAA-C02 Exam Details

  • Exam Code
    :SAA-C02
  • Exam Name
    :AWS Certified Solutions Architect - Associate (SAA-C02)
  • Certification
    :Amazon Certifications
  • Vendor
    :Amazon
  • Total Questions
    :1080 Q&As
  • Last Updated
    :Jun 04, 2025

Amazon SAA-C02 Online Questions & Answers

  • Question 961:

    A company needs to retain application log files for a critical application for 10years. The application team regularly accesses logs from the past month for troubleshooting, but logs older than 1 month are rarely accessed. Theapplication generates more than 10 TB of logs per month. Which storage option meets these requirements MOST cost-effectively?

    A. Store the logs in Amazon S3. Use AWS Backup to move logs more than 1 month old to S3 Glacier Deep Archive
    B. Store the logs in Amazon S3. Use S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive.
    C. Store the logs in Amazon CloudWatch Logs. Use AWS Backup to move logs more than 1 month old to S3 Glacier Deep Archive.
    D. Store the logs in Amazon CloudWatch Logs. Use Amazon S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive.

  • Question 962:

    A company wants to host a web application on AWS that will communicate to a database within a VPC. The application should be highly available.

    What should a solutions architect recommend?

    A. Create two Amazon EC2 instances to host the web servers behind a load balancer, and then deploy the database on a large instance.
    B. Deploy a load balancer in multiple Availability Zones with an Auto Scaling group for the web servers, and then deploy Amazon RDS in multiple Availability Zones.
    C. Deploy a load balancer in the public subnet with an Auto Scaling group for the web servers, and then deploy the database on an Amazon EC2 instance in the private subnet.
    D. Deploy two web servers with an Auto Scaling group, configure a domain that points to the two web servers, and then deploy a database architecture in multiple Availability Zones.

  • Question 963:

    A company needs a storage solution for an application that runs on a high performance computing (HPC) cluster. The cluster is hosted on AWS Fargate for Amazon Elastic Container Service (Amazon ECS) The company needs a mountable file system that provides concurrent access to files while delivering hundreds of GBps of throughput at sub-millisecond latencies

    Which solution meets these requirements?

    A. Create an Amazon FSx for Lustre file share for the application data Create an IAM role that allows Fargate to access the FSx for Lustre file share
    B. Create an Amazon Elastic File System (Amazon EFS) file share for the application data. Create an IAM role that allows Fargate to access the EFS file share.
    C. Create an Amazon S3 bucket for the application data. Create an S3 bucket policy that allows Fargate to access the S3 bucket
    D. Create an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS SSD (io2) volume for the application data Create an IAM role that allows Fargate to access the volume.

  • Question 964:

    A company is concerned that two NAT instances in use will no longer be able to support the traffic needed for the company's application. A solutions architect wants to implement a solution that is highly available fault tolerant, and automatically scalable What should the solutions architect recommend?

    A. Remove the two NAT instances and replace them with two NAT gateways in the same Availability Zone.
    B. Use Auto Scaling groups with Network Load Balancers for the NAT instances in different Availability Zones.
    C. Remove the two NAT instances and replace them with two NAT gateways in different Availability Zones.
    D. Replace the two NAT instances with Spot Instances in different Availability Zones and deploy a Network Load Balancer.

  • Question 965:

    A company runs an application in a branch office within a small data closet with no virtualized compute resources. The application data is stored on an NFS volume. Compliance standards require a daily offsite backup of the NFS volume. Which solution meet these requirements?

    A. Install an AWS Storage Gateway file gateway on premises to replicate the data to Amazon S3.
    B. Install an AWS Storage Gateway file gateway hardware appliance on premises to replicate the data to Amazon S3.
    C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate the data to Amazon S3.
    D. Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate the data to Amazon S3.

  • Question 966:

    A company has an API-based inventory reporting application running on Amazon EC2 instances. The application stores information in an Amazon DynamoDB table. The company's distribution centers have an on-premises shipping application that calls an API to update the inventory before printing shipping labels. The company has been experiencing application interruptions several times each day, resulting in lost transactions.

    What should a solutions architect recommend to improve application resiliency?

    A. Modify the shipping application to write to a local database
    B. Modify the application APIs to run serverless using AWS Lambda
    C. Configure Amazon API Gateway to call the EC2 inventory application APIs.
    D. Modify the application to send inventory updates using Amazon Simple Queue Service (Amazon SQS)

  • Question 967:

    A company has no existing file share services. A new project requires access to file storage that is mountable as a drive for on-premises desktops. The file server must authenticate users to an Active Directory domain before they are able to access the storage.

    Which service will allow Active Directory users to mount storage as a drive on their desktops?

    A. Amazon S3 Glacier
    B. AWS DataSync
    C. AWS Snowball Edge
    D. AWS Storage Gateway

  • Question 968:

    A company has a multi-tier application deployed on several Amazon EC2 instances in an Auto Scaling group. An Amazon RDS for Oracle instance is the application'', data layer that uses Oracle-specific PUSQL functions. Traffic to the application has been steadily increasing This is causing the EC2 instances to become overloaded an i RDS instance to run out of storage. The Auto Scaling group does not have any scaling metrics and defines the minimum healthy instance count only. The company predicts that traffic will continue to increase at a steady but unpredictable rate before leveling off.

    What should a solutions architect do to ensure the system can automatically scale for the increased traffic? (Select TWO)

    A. Configure storage Auto Scaling on the RDS for Oracle instance.
    B. Migrate the database to Amazon Aurora to use Auto Scaling storage
    C. Configure an alarm on the RDS for Oracle instance for low free storage space.
    D. Configure the Auto Scaling group to use the average CPU as the scaling metric.
    E. Configure the Auto Scaling group to use the average free memory as the scaling metric.

  • Question 969:

    A social media company allows users to upload images to its website. The website runs on Amazon EC2 instances. During upload requests, the website resizes the images to a standard size and stores the resized images in Amazon S3.

    Users are experiencing slow upload requests to the website.

    The company needs to reduce coupling within the application and improve website performance A solutions architect must design the most operationally efficient process for image uploads

    Which combination of actions should the solutions architect take to meet these requirements'? (Select TWO.)

    A. Configure the application to upload images to S3 Glacier.
    B. Configure the web server to upload the original images to Amazon S3.
    C. Configure the application to upload images directly from each user's browser to Amazon S3 through the use of a presigned URL.
    D. Configure S3 Event Notifications to invoke an AWS Lambda function when an image is uploaded.Use the function to resize the image
    E. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function on a schedule to resize uploaded images.

  • Question 970:

    A company recently migrated a legacy application from an on-premises data center to AWS The application is running on an Amazon EC2 instance The EC2 instance is deployed in a private subnet in a VPC without inbound internet access The application support team requires SSH access to the operating system to perform periodic maintenance.

    Which solution provides secure access with the LEAST operational effort?

    A. Configure AWS Client VPN to access the VPC Update the EC2 instance security group inbound rules to allow access from Client VPN
    B. Configure AWS Site-to-Site VPN to access the VPC Update the EC2 instance security group inbound rules to allow access from Site-to-Site VPN
    C. Attach the AmazonSSMManagedlnstanceCore 1AM policy to the EC2 instance role Use AWS Systems Manager Session Manager to enable SSH connection.
    D. Deploy a bastion host in a public subnet Allow SSH access to the bastion host from the internet Update the EC2 instance security group inbound rules to allow access from the bastion host

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SAA-C02 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.