SAA-C02 Online Practice Questions and Answers

A solutions architect needs to design a managed storage solution for a company's application that includes high-performance machine learning. This application runs on AWS Fargate. and the connected storage needs to have concurrent access to files and deliver high performance.

Which storage option should the solutions architect recommend?

A. Create an Amazon S3 bucket for the application and establish an IAM role for Fargate to communicate with Amazon S3.

B. Create an Amazon FSx for Lustre file share and establish an IAM role that allows Fargate to communicate with FSx for Lustre

C. Create an Amazon Elastic File System (Amazon EFS> file share and establish an IAM role that allows Fargate to communicate with Amazon EFS.

D. Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an IAM role that allows Fargate to communicate with Amazon EBS.

A company has two applications: a sender application that sends messages with payloads to be processed and a processing application intended to receive the messages with payloads The company wants to implement an AWS service to handle messages between the two applications. The sender application can send about 1,000 messages each hour The messages may take up to 2 days to be processed If the messages fail to process, they must be retained so that they do not impact the processing of any remaining messages

Which solution meets these requirements and is the MOST operationally efficient?

A. Set up an Amazon EC2 instance running a Redis database Configure both applications to use the instance Store, process, and delete the messages,respectively

B. Use an Amazon Kinesis data stream to receive the messages from the sender application Integrate the processing application with the Kinesis Client Library (KCL)

C. Integrate the sender and processor applications with an Amazon Simple Queue Service (Amazon SQS) queue. Configure a dead-letter queue to collect the messages that failed to process

D. Subscribe the processing application to an Amazon Simple Notification Service (Amazon SNS) topic to receive notifications to process Integrate the sender application to write to the SNS topic.

A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on-premises backup infrastructure and reduce costs by eliminating the use of physical

backup tapes. The company must preserve the existing investment in the on-premises backup applications and workflows.

What should a solutions architect recommend?

A. Set up AWS Storage Gateway to connect with the backup applications using the NFS interface.

B. Set up an Amazon EFS file system that connects with the backup applications using the NFS interface

C. Set up an Amazon EFS file system that connects with the backup applications using the iSCSI interface

D. Set up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface.

A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.

Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

A. Store the static files on Amazon S3. Use Amazon A. CloudFront to cache objects at the edge.

B. Store the static files on Amazon S3. Use Amazon ElastiCache to cache objects at the edge.

C. Store the server-side code on Amazon Elastic File System (Amazon EFS). Mount the EFS volume on each EC2 instance to share the files.

D. Store the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.

E. Store the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on each EC2 instance to share the files.

A company built an application with Docker containers and needs to run the application in the AWS Cloud. The company wants to use a managed service to host the application.

The solution must scale in and out appropriately according to demand on the individual container services. The solution also must not result in additional operational overhead or infrastructure to manage. Which solutions will meet these requirements? (Select TWO.)

A. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate.

B. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate.

C. Provision an Amazon API Gateway API. Connect the API to AWS Lambda to run the containers.

D. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes.

E. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes.

A company has a business-critical application that runs on Amazon bC2 instances. The application stores data m an Amazon DynamoDB table. The company must be able to revert the table to any point within the last 24 hours. Which solution meets these requirements with the LEAST operational overhead?

A. Configure point-in-time recovery for the fabric

B. Use AWS Backup for the table

C. Use an AWS Lambda function to make an on demand backup of the table every hour

D. Turn on streams on the table to capture a log of all changes to the table in the last 24 hours. Store a copy of the stream in an Amazon S3 bucket

A business application is hosted on Amazon EC2 and uses Amazon S3 for encrypted object storage. The chief information security officer has directed that no application traffic between the two services should traverse the public internet.

Which capability should the solutions architect use to meet the compliance requirements?

A. AW3 Key Management Service (AWS KMS)

B. VPC endpoint

C. Private subnet

D. Virtual private gateway

A company runs an online media site, hosted on-premises. An employee posted a product review that contained videos and pictures. The review went viral and the company needs to handle the resulting spike in website traffic. What action would provide an immediate solution? 252

A. Redesign the website to use Amazon API Gateway, and use AWS Lambda to deliver content

B. Add server instances using Amazon EC2 and use Amazon Route 53 with a failover routing policy

C. Serve the images and videos using an Amazon CloudFront distribution created using the news site as the origin

D. Use Amazon ElasbCache for Redis for caching and reducing the load requests from the origin

A company is using Amazon Route 53 latency-based routing to route requests to its UDP- based application for users around the world. The application is hosted on redundant servers in the company's on-premises data centers in the United States. Asia, and Europe. The company's compliance requirements state that the application must be hosted on premises The company wants to improve the performance and availability of the application.

What should a solutions architect do to meet these requirements?

A. Configure throe Network Load Balancers (NLBs) in the three AWS Regions to address the on- premises endpoints Create an accelerator by using AWS Global Accelerator, and register the NLBs as its endpoints. Provide access to the application by using a CNAML that points to the accelerator DNS

B. Configure three Application Load Balancers (ALGs) in the three AWS Regions to wireless the on- premises endpoints. Create an accelerator by using AWS Global Accelerator, and register the ALBs as its endpoints Provide access to the application by using a CNAK1L that points to the accelerator UNS

C. Configure three Network Load Balancers (NLOs) in the three AWS Regions to address the on- prernises endpoints In Route 53. create ?latency-based record that points to the three NLBs. and use it as an origin for an Amazon CloudFront distribution Provide access to the application by using a CNAML that points to the CloudFront DNS

D. Configure three Application Load Balancers (ALBs) in the three AWS Regions to address the on premises endpoint. In Route 53. create a latency based record that points to the three ALUs and use it as an origin for an Amazon CloudFront distribution Provide access to the application by using a CNAMF that points to the CloudFront DNS.

A company has concerns about its Amazon RDS database. The workload is unpredictable, and periodic floods of new user registrations can cause the company to run out storage. The database runs on a general purpose instance with 300 GB of storage. What should a solution architect recommend to the company?

A. Enable RDS storage autoscaling.

B. Schedule vertical instance scaling.

C. Change to a storage optimized instance type and vertically scale the database.

D. Configure an AWS Lambda function to increase RDS storage by 1 GiB when storage space is low.

A team has an application that detects new objects being uploaded into an Amazon bucket. The upload a trigger AWS Lambda function to write metadata into an Amazon DynamoDB table and an Amazon RDS for PostgreSQL database. Which action should the team take to ensure high availability?

A. Enable Cross-Region Replication to ensure high availability

B. Create a Lambda function for each Availability Zone the application is deployed in

C. Enable Multi-AZ on the RDS PostgreSQL database.

D. Create a DynamoDB stream for the DynamoDB table

A company is designing a new service that will run on Amazon EC2 instance behind an Elastic Load Balancer. However, many of the web service clients can only reach IP addresses whitelisted on their firewalls. What should a solution architect recommend to meet the clients' needs? What should a solution architect recommend to meet the clients' needs?

A. A Network Load Balancer with an associated Elastic IP address.

B. An Application Load Balancer with an a associated Elastic IP address

C. An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address

D. An EC2 instance with a public IP address running as a proxy in front of the load balancer

A company is moving its legacy workload to the AWS Cloud. The workload files will be shared, appended, and frequently accessed through Amazon EC2 instances when they are first created The files will be accessed occasionally as they age What should a solutions architect recommend?

A. Store the data using Amazon EC2 instances with attached Amazon Elastic Block Store (Amazon EBS) data volumes

B. Store the data using AWS Storage Gateway volume gateway and export rarely accessed data to Amazon S3 storage

C. Store the data using Amazon Elastic File System (Amazon EFS) with lifecycle management enabled for rarely accessed data

D. Store the data using Amazon S3 with an S3 lifecycle policy enabled to move data to S3 Standard- Infrequent Access (S3 Standard-IA)

A company is creating a web application that will store a large number of images in Amazon S3 The images will be accessed by users over variable periods of time. The company wants to:

1.

Retain all the images

2.

Incur no cost for retrieval.

3.

Have minimal management overhead.

4.

Have the images available with no impact on retrieval time.

Which solution meets these requirements?

A. Implement S3 Intelligent-Tiering

B. Implement S3 storage class analysis

C. Implement an S3 Lifecycle policy to move data to S3 Standard-Infrequent Access (S3 Standard-IA).

D. Implement an S3 Lifecycle policy to move data to S3 One Zone-Infrequent Access (S3 One Zone-IA).

A solutions architect has created a new AWS account and must secure AWS account root user access Which combination of actions will accomplish this? (Select TWO.)

A. Ensure the root user uses a strong password

B. Enable multi-factor authentication to the root user

C. Store root user access keys in an encrypted Amazon S3 bucket

D. Add the root user to a group containing administrative permissions.

E. Apply the required permissions to the root user with an inline policy document