Certification Training for SAA-C02 Exam Dumps Test Engine [2021]
Dec 12, 2021 Step by Step Guide to Prepare for SAA-C02 Exam
What is the duration, language, and format of the Amazon SAA-C02 Exam
- Duration of Exam: 130 minutes
- Number of Questions: 65
- Type of Questions: Multiple choice (MCQs), multiple answers
- Passing score: 72%
- No negative marking for wrong answers
NEW QUESTION 171
A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of data. Which combination of storage and caching should the solutions architect use?
- A. AWS Storage Gateway with Amazon ElastiCache
- B. Amazon S3 Glacier with Amazon ElastiCache
- C. Amazon S3 with Amazon CloudFront
- D. Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront
Answer: B
NEW QUESTION 172
A company is building a web application that serves a content management system.
The content management system runs on Amazon EC2 instances behind an Application Load Balancer (ALB).
The EC2 instances run in an Auto Scaling group across multiple Availability Zones Users are constantly adding and updating files blogs and other website assets in the content management system.
A solutions architect must implement a solution in which all the EC2 instances share up-to-date website content with the least possible lag time Which solution meets these requirements''
- A. Restore an Amazon Elastic Block Store (Amazon EBS) snapshot with the website assets Attach the EBS snapshot as a secondary EBS volume when a new EC2 instance is launched Configure the website hosting application to reference the website assets that are stored in the secondary EBS volume
- B. Copy the website assets to an Amazon Elastic File System (Amazon EFS) file system Configure each EC2 instance to mount the EPS file system locally Configure the website hosting application to reference the website assets that are stored in the EFS file system
- C. Update the EC2 user data in the Auto Scaling group lifecycle policy to copy the website assets from the EC2 instance that was launched most recently Configure the ALB to make changes to the website assets only m the newest EC2 instance
- D. Copy the website assets to an Amazon S3 bucket Ensure that each EC2 instance downloads the website assets from the S3 bucket to the attacneo Amazon Elastic Block Store (Amazon EBS) volume Run the S3 sync command once each hour to keep files up to date
Answer: B
NEW QUESTION 173
A company has a hybrid application hosted on multiple on-premises servers with static IP addresses. There is already a VPN that provides connectivity between the VPC and the on-premises network. The company wants to distribute TCP traffic across the on-premises servers for internet users.
What should a solutions architect recommend to provide a highly available and scalable solution?
- A. Launch an Amazon EC2 instance with public IP addresses in an Auto Scaling group and distribute traffic to the on-premises servers.
- B. Launch an internet-facing Application Load Balancer (ALB) and register on-premises IP addresses with the ALB.
- C. Launch an Amazon EC2 instance, attach an Elastic IP address, and distribute traffic to the on-premises servers.
- D. Launch an internet-facing Network Load Balancer (NLB) and register on-premises IP addresses with the NLB.
Answer: D
NEW QUESTION 174
A company is using a tape backup solution to store its key application data offsite The daily data volume is around 50 TB The company needs to retain the backups for 7 years for regulatory purposes The backups are rarely accessed and a week's notice is typically given if a backup needs to be restored The company is now considering a cloud-based option to reduce the storage costs and operational burden of managing tapes The company also wants to make sure that the transition (rom tape backups to the cloud minimizes disruptions Which storage solution is MOST cost-effective'?
- A. Use Amazon Storage Gateway to back up to Amazon S3 and create a lifecycle policy to move the backup to Amazon S3 Glacier
- B. Use Amazon Storage Gateway to back up to Amazon Glacier Deep Archive
- C. Copy the backup data to Amazon S3 and create a lifecycle policy to move the data to Amazon S3 Glacier
- D. Use AWS Snowball Edge to directly integrate the backups with Amazon S3 Glacier.
Answer: B
NEW QUESTION 175
A company's web application uses an Amazon RDS PostgreSQL DB instance to store its application data.
During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?
- A. Create a Multi-AZ database and direct reporting traffic to the standby.
- B. Create a read replica and direct reporting traffic to the replica.
- C. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.
- D. Create a cross-Region read replica and direct reporting traffic to the replica.
Answer: A
NEW QUESTION 176
A company is developing a file-sharing application that will use an Amazon S3 bucket for storage The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL What should a solutions architect do to meet these requirements?
- A. Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution Configure the S3 bucket permissions so that only the OAI has read permission
- B. Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN)
- C. Write individual policies for each S3 bucket to grant read permission for only CloudFront access.
- D. Create an 1AM user Grant the user read permission to objects in the S3 bucket Assign the user to CloudFront
Answer: B
NEW QUESTION 177
A company has on-premises servers running a relational database.
The current database serves high read traffic for users in different locations.
The company wants to migrate to AWS with the least amount of effort.
The database solution should support disaster recovery and not affect the company's current traffic flow.
Which solution meets these requirements?
- A. Use a database in Amazon RDS with Multi-AZ and at least one standby replica
- B. Use databases hosted on Amazon EC2 instances behind an Application Load Balancer in different Availability Zones
- C. Use a database in Amazon RDS with Multi-AZ and at least one read replica
- D. Use databases hosted on multiple Amazon EC2 instances in different AWS Regions
Answer: C
Explanation:
https://aws.amazon.com/blogs/database/implementing-a-disaster-recovery-strategy-with-amazon- rds/
NEW QUESTION 178
A company offers a food delivery service that is growing rapidly Because of the growth the company's order processing system is experiencing scaling problems during peak traffic hours. The current architecture includes the following;
* A group of Amazon EC2 instances that run in an Amazon EC2 Auto Scaling group to collect orders from the application
* Another group of EC2 instances that run in an Amazon EC2 Auto Scaling group to fulfill orders The order collection process occurs quickly, but the order fulfillment process can take longer Data must not be lost because of a scaling event A solutions architect must ensure that the order collection process and the order fulfillment process can both scale properly during peak traffic hours The solution must optimize utilization of the company's AWS resources Which solution meets these requirements'?
- A. Provision two Amazon Simple Queue Service (Amazon SQS) queues one for order collection and another for order fulfillment Configure the EC2 instances to poll their respective queue Scale the Auto Scaling groups based on notifications that the queues send
- B. Use Amazon CloudWatch metrics to monitor the CPU of each instance in the Auto Scaling groups. Configure each Auto Scaling group's minimum capacity according to peak workload values
- C. Provision two Amazon Simple Queue Service (Amazon SQS) queues one for order collection and another for order fulfillment. Configure the EC2 instances to poll their respective queue. Create a metric based on a backlog per instance calculation Scale the Auto Scaling groups based on this metric.
- D. Use Amazon CloudWatch metrics to monitor the CPU of each instance in the Auto Scaling groups Configure a CloudWatch alarm to invoke an Amazon Simple Notification Service (Amazon SNS) topic that creates additional Auto Scaling groups on demand
Answer: C
NEW QUESTION 179
A company manages its own Amazon EC2 instances that run MySQL databases. The company is manually managing replication and scaling as demand increases or decreases. The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed. The solution also must offer improved performance, scaling, and durability with minimal effort from operations.
Which solution meets these requirements?
- A. Migrate the databases to Amazon Aurora Serverless for Aurora PostgreSQL.
- B. Create an EC2 Auto Scaling group for the database tier. Migrate the existing databases to the new environment.
- C. Migrate the databases to Amazon Aurora Serverless for Aurora MySQL.
- D. Combine the databases into one larger MySQL database. Run the larger database on larger EC2 instances.
Answer: B
Explanation:
Explanation/Reference: https://aws-quickstart.s3.amazonaws.com/quickstart-drupal/doc/drupal-on-the-aws-cloud.pdf (p.6)
NEW QUESTION 180
A solutions architect is designing an VPC that requires access to a remote API server using IPv6 Resources within the VPC should not be accessed directly from the internet.
How should this be achieved?
- A. Use a NAT gateway and update the routing tables
- B. Use a NAT gateway and deny public access using security groups.
- C. Attach an internet gateway and deny public access using security groups
- D. Attach an egress-only internet gateway and update the routing tables
Answer: D
NEW QUESTION 181
A company hosts a static website within an Amazon S3 bucket. A solutions architect needs to ensure that data can be recovered in case of accidental deletion.
D18912E1457D5D1DDCBD40AB3BF70D5D
Which action will accomplish this?
- A. Enable Amazon S3 cross-Region replication.
- B. Enable Amazon S3 versioning
- C. Enable an Amazon S3 lifecycle policy
- D. Enable Amazon S3 Intelligent-Tiering.
Answer: B
Explanation:
Explanation
Data can be recover if versioning enable, also it provide a extra protection like file delete,MFA delete. MFA Delete only works for CLI or API interaction, not in the AWS Management Console. Also, you cannot make version DELETE actions with MFA using IAM user credentials. You must use your root AWS account.
https://aws.amazon.com/blogs/security/securing-access-to-aws-using-mfa-part-3/ Object Versioning Use Amazon S3 Versioning to keep multiple versions of an object in one bucket. For example, you could store my-image.jpg (version 111111) and my-image.jpg (version 222222) in a single bucket. S3 Versioning protects you from the consequences of unintended overwrites and deletions. You can also use it to archive objects so that you have access to previous versions.
You must explicitly enable S3 Versioning on your bucket. By default, S3 Versioning is disabled. Regardless of whether you have enabled Versioning, each object in your bucket has a version ID. If you have not enabled Versioning, Amazon S3 sets the value of the version ID to null. If S3 Versioning is enabled, Amazon S3 assigns a version ID value for the object. This value distinguishes it from other versions of the same key.
https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectVersioning.html
NEW QUESTION 182
A company has 700 TB of backup data stored in network attached storage (NAS) in its data center This backup data need to be accessible for infrequent regulatory requests and must be retained 7 years. The company has decided to migrate this backup data from its data center to AWS. The migration must be complete within 1 month The company has 500 Mbps of dedicated bandwidth on its public internet connection available for data transfer.
What should a solutions architect do to migrate and store the data at the LOWEST cost?
- A. Deploy a VPN connection between the data center and Amazon VPC Use the AWS CLI to copy the data from on premises to Amazon S3 Glacier.
- B. Provision a 500 Mbps AWS Direct Connect connection and transfer the data to Amazon S3. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
- C. Order AWS Snowball devices to transfer the data Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive
- D. Use AWS DataSync to transfer the data and deploy a DataSync agent on premises Use the DataSync task to copy files from the on-premises NAS storage lo Amazon S3 Glacier
Answer: C
NEW QUESTION 183
A company has an API-based inventory reporting application running on Amazon EC2 instances.
The application stores information in an Amazon DynamoDB table. The company's distribution centers have an on-premises shipping application that calls an API to update the inventory before printing shipping labels.
The company has been experiencing application interruptions several times each day, resulting in lost transactions.
What should a solutions architect recommend to improve application resiliency?
- A. Modify the application APIs to run serverless using AWS Lambda.
- B. Modify the shipping application to write to a local database.
- C. Modify the application to send inventory updates using Amazon Simple Queue Service (Amazon SQS).
- D. Configure Amazon API Gateway to call the EC2 inventory application APIs.
Answer: A
NEW QUESTION 184
A company is running a batch application on Amazon EC2 instances.
The application consists of a backend with multiple Amazon RDS databases.
The application is causing a high number of reads on the databases.
A solutions architect must reduce the number of database reads while ensuring high availability.
What should the solutions architect do to meet this requirement?
- A. Use Amazon ElastiCache for Memcached
- B. Use Amazon Route 53 DNS caching
- C. Use Amazon ElastiCache for Redis
- D. Add Amazon RDS read replicas.
Answer: D
NEW QUESTION 185
A solution architect is designing a hybrid application using the AWS cloud. The network between the on-premises data center and AWS will use an AWS Direct Connect (DX) connection. The application connectivity between AWS and the on-premises data center must be highly resilient.
Which DX configuration should be implemented to meet these requirements?
- A. Configure multiple virtual interfaces on top of a DX connection.
- B. Configure a DX connection using the most reliable DX partner.
- C. Configure a DX connection with a VPN on top of it.
- D. Configure DX connections at multiple DX locations.
Answer: C
NEW QUESTION 186
A recently acquired company is required to build its own infrastructure on AWS and migrate multiple applications to the cloud within a month Each application has approximately 50 TB of data to be transferred After the migration is complete this company and its parent company will both require secure network connectivity with consistent throughput from their data centers to the applications A solutions architect must ensure one-time data migration and ongoing network connectivity Which solution will meet these requirements?
- A. AWS Site-to-Site VPN for both the initial transfer and ongoing connectivity
- B. AWS Direct Connect for both the initial transfer and ongoing connectivity
- C. AWS Snowball for the initial transfer and AWS Site-to-Site VPN for ongoing connectivity
- D. AWS Snowball for the initial transfer and AWS Direct Connect for ongoing connectivity
Answer: D
Explanation:
Explanation
https://aws.amazon.com/directconnect/
NEW QUESTION 187
Can you specify the security group that you created for a VPC when you launch an instance in EC2-Classic?
- A. No, you can specify the security group created for EC2-Classic when you launch a VPC instance.
- B. No, you can specify the security group created for EC2-Classic to a non-VPC based instance only.
- C. Yes
- D. No
Answer: D
Explanation:
If you're using EC2-Classic, you must use security groups created specifically for EC2-Classic.
When you launch an instance in EC2-Classic, you must specify a security group in the same region as the instance. You can't specify a security group that you created for a VPC when you launch an instance in EC2-Classic.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html#ec2-classic- securit y-groups
NEW QUESTION 188
An Amazon EC2 administrator created the following policy associated with an IAM group containing several users.
What is the effect of this policy?
- A. Users can terminate an EC2 instance in any AWS Region except us-east-1.
- B. Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is
10.100.100.254 - C. Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.
100. 254 - D. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region
Answer: C
NEW QUESTION 189
A company is backing up on-premises databases to local file server shares using the SMB protocol. The company requires immediate access to 1 week of backup files to meet recovery objectives. Recovery after a week is less likely to occur, and the company can tolerate a delay in accessing those older backup files.
What should a solutions architect do to meet these requirements with the LEAST operational effort?
- A. Deploy an AWS Storage Gateway file gateway with sufficient storage to hold 1 week of backups.
Point the backups to SMB shares from the file gateway. - B. Deploy Amazon Elastic File System (Amazon EFS) to create a file system with exposed NFS shares with sufficient storage to hold all the desired backups.
- C. Continue to back up to the existing file shares. Deploy AWS Database Migration Service (AWS DMS) and define a copy task to copy backup files older than 1 week to Amazon S3, and delete the backup files from the local file store.
- D. Deploy Amazon FSx for Windows File Server to create a file system with exposed file shares with sufficient storage to hold all the desired backups.
Answer: D
NEW QUESTION 190
......
Ultimate Guide to Prepare SAA-C02 Certification Exam for AWS Certified Associate: https://examcollection.bootcamppdf.com/SAA-C02-exam-actual-tests.html