SAA-C02 | Up To The Minute SAA-C02 Study Guides For AWS Certified Solutions Architect - Associate (SAA-C02) Certification

NEW QUESTION 1
A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand The event is expected to attract a global online audience
Which service will improve the performance of both the real-time and on-demand streaming?

• A. Amazon CloudFront
• B. AWS Global Accelerator
• C. Amazon Route 53
• D. Amazon S3 Transfer Acceleration

Answer: A

NEW QUESTION 2
A company is running an ecommerce application on Amazon EC2 The application consists of a stateless web tier that requires a minimum of 10 instances, and a peak of 250 instances to support the application's usage The application requires 50 instances 80% of the time
Which solution should be used to minimize costs?

• A. Purchase Reserved Instances to cover 250 instances
• B. Purchase Reserved Instances to cover 80 instances Use Spot Instances to cover the remaining instances
• C. Purchase On-Demand Instances to cover 40 instances Use Spot Instances to cover the remaining instances
• D. Purchase Reserved Instances to cover 50 instances Use On-Demand and Spot Instances to cover the remaining instances

Answer: D

NEW QUESTION 3
A company hosts a static website on-premises and wants to migrate the website to AWS The website should load as quickly as possible for users around the world The company also wants the most cost-effective solution
What should a solutions architect do to accomplish this?

• A. Copy the website content to an Amazon S3 bucket Configure the bucket to serve static webpage content Replicate the S3 bucket to multiple AWS Regions
• B. Copy the website content to an Amazon S3 bucket Configure the bucket to serve static webpage content Configure Amazon CloudFront with the S3 bucket as the origin
• C. Copy the website content to an Amazon EBS-backed Amazon EC2 instance running Apache HTTP Server Configure Amazon Route 53 geolocation routing policies to select the closest origin
• D. Copy the website content to multiple Amazon EBS-backed Amazon EC2 instances running Apache HTTP Server in multiple AWS Regions Configure Amazon CloudFront geolocation routing policies to select the closest origin

Answer: B

NEW QUESTION 4
An Amazon EC2 administrator created the following policy associated with an 1AM group containing several users.

What is the effect of this policy?

• A. Users can terminate an EC2 instance in any AWS Region except us-east-1.
• B. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region
• C. Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254
• D. Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100. 100. 254

Answer: C

NEW QUESTION 5
A media streaming company collects real-time data and stores it in a disk-optimized database system The company is not getting the expected throughput and wants an in-memory database storage solution that performs faster and provides high availability using data replication.
Which database should a solutions architect recommend'?

• A. Amazon RDS for MySQL
• B. Amazon RDS for PostgreSQL
• C. Amazon ElastiCache for Redis
• D. Amazon ElastiCache for Memcached

Answer: C

NEW QUESTION 6
A company is planning to migrate a business-critical dataset to Amazon S3. The current solution design uses a single S3 bucket in the us-east-1 Region with versioning enabled to store the dataset. The company's disaster recovery policy states that all data multiple AWS Regions.
How should a solutions architect design the S3 solution?

• A. Create an additional S3 bucket in another Region and configure cross-Region replication.
• B. Create an additional S3 bucket in another Region and configure cross-origin resource sharing (CORS).
• C. Create an additional S3 bucket with versioning in another Region and configure cross-Region replication.
• D. Create an additional S3 bucket with versioning in another Region and configure cross-origin resource (CORS).

Answer: C

NEW QUESTION 7
A gaming company has multiple Amazon EC2 instances in a single Availability Zone for its multiplayer game that communicates with users on Layer 4 The chief technology officer (CTO) wants to make the architecture highly available and cost-effective.
What should a solutions architect do to meet these requirements? (Select TWO.)

• A. Increase the number of EC2 instances.
• B. Decrease the number of EC2 instances
• C. Configure a Network Load Balancer in front of the EC2 instances.
• D. Configure an Application Load Balancer in front of the EC2 instances
• E. Configure an Auto Scaling group to add or remove instances in multiple Availability Zones automatically.

Answer: CE

NEW QUESTION 8
A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office to Amazon S3 Glacier The solution must avoid saturating the branch office's low-bandwidth internet connection
What is the MOST cost-effective solution1?

• A. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly Create a bucket policy to enforce a VPC endpoint
• B. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination Create a bucket policy to enforce a VPC endpoint
• C. Mount the network-attached file system to Amazon S3 and copy the files directl
• D. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier
• E. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier

Answer: D

NEW QUESTION 9
A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?

• A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
• B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.
• C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period
• D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens

Answer: B

NEW QUESTION 10
A company is managing health records on-premises The company must keep these records indefinitely, disable any modifications to the records once they are stored, and granularly audit access at all levels. The chief technology officer (CTO) is concerned because there are already millions of records not being used by any application, and the current infrastructure is running out of space The CTO has requested a solutions architect design a solution to move existing data and support future records
Which services can the solutions architect recommend to meet these requirements'?

• A. Use AWS DataSync to move existing data to AW
• B. Use Amazon S3 to store existing and new data Enable Amazon S3 object lock and enable AWS CloudTrail with data events.
• C. Use AWS Storage Gateway to move existing data to AWS Use Amazon S3 to store existing and new data Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
• D. Use AWS DataSync to move existing data to AWS Use Amazon S3 to store existing and new data Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
• E. Use AWS Storage Gateway to move existing data to AWS Use Amazon Elastic Block Store (Amazon EBS) to store existing and new data Enable Amazon S3 object lock and enable Amazon S3 server access logging

Answer: B

NEW QUESTION 11
A company has a three-tier image-sharing application it uses an Amazon EC2 instance for the front-end layer, another for the backend tier, and a third for the MySQL database A solutions architect has been tasked with designing a solution that is highly available, and requires the least amount of changes to the application
Which solution meets these requirements'?

• A. Use Amazon S3 to host the front-end layer and AWS Lambda functions for the backend layer Move the database to an Amazon DynamoDB table and use Amazon S3 to store and serve users' images
• B. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end and backend layersMove the database to an Amazon RDS instance with multiple read replicas to store and serve users' images.
• C. Use Amazon S3 to host the front-end layer and a fleet of Amazon EC2 instances in an Auto Scaling group for the backend layer Move the database to a memory optimized instance type to store and serve users' images
• D. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end and backend layers Move the database to an Amazon RDS instance with a Multi-AZ deployment Use Amazon S3 to store and serve users' images

Answer: D

NEW QUESTION 12
A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds
Which solution should the solutions architect suggest?

• A. Set up an Amazon API Gateway and use Amazon ECS.
• B. Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
• C. Set up an Amazon API Gateway and use AWS Lambda functions
• D. Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling

Answer: C

NEW QUESTION 13
A solutions architect is designing a two-tier web application The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet Security is a high priority for the company
How should security groups be configured in this situation? (Select TWO )

• A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0 0 0 0/0
• B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0 0 0 0/0
• C. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier
• D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier
• E. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier

Answer: AC

NEW QUESTION 14
A company has a legacy application that processes data in two parts The second part of the process takes longer than the first, so the company has decided to rewrite the application as two microservices running on Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?

• A. Implement code in microservice 1 to send data to an Amazon S3 bucke
• B. Use S3 event notifications to invoke microservice 2.
• C. Implement code in microservice 1 to publish data to an Amazon SNS topic Implement code in microservice 2 to subscribe to this topic
• D. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehos
• E. Implement code in microservice 2 to read from Kinesis Data Firehose.
• F. Implement code in microservice 1 to send data to an Amazon SQS queue Implement code in microservice 2 to process messages from the queue

Answer: C

NEW QUESTION 15
A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB) The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures
What should the solutions architect recommend?

• A. Leverage Amazon CloudFront with the ALB endpoint as the origin
• B. Deploy an appropriate managed rule for AWS WAF and associate it with the ALB
• C. Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked
• D. Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances

Answer: B

NEW QUESTION 16
A company's application is running on Amazon EC2 instances m a single Region in the event of a disaster a solutions architect needs to ensure that the resources can also be deployed to a second Region
Which combination of actions should the solutions architect take to accomplish this-? (Select TWO)

• A. Detach a volume on an EC2 instance and copy it to Amazon S3
• B. Launch a new EC2 instance from an Amazon Machine image (AMI) in a new Region
• C. Launch a new EC2 instance in a new Region and copy a volume from Amazon S3 to the new instance
• D. Copy an Amazon Machine Image (AMI) of an EC2 instance and specify a different Region for the destination
• E. Copy an Amazon Elastic Block Store (Amazon EBS) volume from Amazon S3 and launch an EC2 instance in the destination Region using that EBS volume

Answer: BD

NEW QUESTION 17
A company’s web application uses an Amazon RDS PostgreSQL DB instance to store its application data. During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

• A. Create a read replica and direct reporting traffic to the replica.
• B. Create a Multi-AZ database and direct reporting traffic to the standby.
• C. Create a cross-Region read replica and direct reporting traffic to the replica.
• D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.

Answer: B

NEW QUESTION 18
An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database
What should the solutions architect do to separate the read requests from the write requests?

• A. Enable read-through caching on the Amazon Aurora database
• B. Update the application to read from the Multi-AZ standby instance
• C. Create a read replica and modify the application to use the appropriate endpoint
• D. Create a second Amazon Aurora database and link it to the primary database as a read replica.

Answer: C

NEW QUESTION 19
A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis An application on an Amazon EC2 instance needs permission to efficiently process the CSV data stored in the S3 bucket.
Which action will MOST securely grant the EC2 instance access to the S3 bucket?

• A. Attach a resource-based policy to the S3 bucket
• B. Create an 1AM user for the application with specific permissions to the S3 bucket
• C. Associate an 1AM role with least privilege permissions to the EC2 instance profile
• D. Store AWS credentials directly on the EC2 instance for applications on the instance to use for API calls

Answer: C

NEW QUESTION 20
An application hosted on AWS is experiencing performance problems, and the application vendor wants to perform an analysis of the log file to troubleshoot further. The log file is stored on Amazon S3 and is 10 GB in size. The application owner will make the log file available to the vendor for a limited time.
What is the MOST secure way to do this?

• A. Enable public read on the S3 object and provide the link to the vendor.
• B. Upload the file to Amazon WorkDocs and share the public link with the vendor.
• C. Generate a presigned URL and have the vendor download the log file before it expires.
• D. Create an IAM user for the vendor to provide access to the S3 bucket and the applicatio
• E. Enforce multifactor authentication.

Answer: C

NEW QUESTION 21
......