Renovate SAA-C02 Questions For AWS Certified Solutions Architect - Associate (SAA-C02) Certification

NEW QUESTION 1
A company has a two-tier application architecture that runs in public and private subnets Amazon EC2 instances running the web application are in the public subnet and a database runs on the private subnet The web application instances and the database are running in a single Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this architecture? (Select TWO.)

• A. Create new public and private subnets in the same AZ for high availability
• B. Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
• C. Add the existing web application instances to an Auto Scaling group behind an Application Load Balancer
• D. Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one AZ
• E. Create new public and private subnets in the same VPC each in a new AZ Migrate the database to an Amazon RDS multi-AZ deployment

Answer: BE

NEW QUESTION 2
A solutions architect is implementing a document review application using an Amazon S3 bucket for storage
The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download, modify, and upload documents
Which combination of actions should be taken to meet these requirements'? (Select TWO )

• A. Enable a read-only bucket ACL
• B. Enable versioning on the bucket
• C. Attach an 1AM policy to the bucket
• D. Enable MFA Delete on the bucket
• E. Encrypt the bucket using AWS KMS

Answer: BD

NEW QUESTION 3
A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet What should the solutions architect do to accomplish this? (Select TWO )

• A. Create a route table entry for the endpoint
• B. Create a gateway endpoint for DynamoDB
• C. Create a new DynamoDB table that uses the endpoint
• D. Create an ENI for the endpoint in each of the subnets of the VPC
• E. Create a security group entry in the default security group to provide access

Answer: AB

NEW QUESTION 4
A solutions architect is designing a solution where users will De directed to a backup static error page it the primary website is unavailable The primary website's DNS records are hosted in Amazon Route 53 where their domain is pointing to an Application Load Balancer (ALB)
Which configuration should the solutions architect use to meet the company's needs while minimizing changes and infrastructure overhead?

• A. Point a Route 53 alias record to an Amazon CloudFront distribution with the ALB as one of its origins Then, create custom error pages for the distribution
• B. Set up a Route 53 active-passive failover configuration Direct traffic to a static error page hosted within an Amazon S3 bucket when Route 53 health checks determine that the ALB endpoint is unhealthy
• C. Update the Route 53 record to use a latency-based routing policy Add the backup static error page hosted within an Amazon S3 bucket to the record so the traffic is sent to the most responsive endpoints
• D. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting a static error page as endpoints Route 53 will only send requests to the instance if the health checks fail for the ALB

Answer: B

NEW QUESTION 5
A company hosts an application on multiple Amazon EC2 instances The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table The SQS queue does not contain any duplicate messages
What should a solutions archived do to ensure messages are being processed once only?

• A. Use the CreateQueue API call to create a new queue
• B. Use the AddPermission API call to add appropriate permissions
• C. Use the ReceiveMessage API call to set an appropriate wait time.
• D. Use the ChangeMessageVisibility API call to increase the visibility timeout

Answer: D

NEW QUESTION 6
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history, the company anticipates a spike in traffic during a holiday each year A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users
Which solution will meet these requirements?

• A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%
• B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand
• C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period
• D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are auto scaling EC2_INSTANCE_LAUNCH events

Answer: B

NEW QUESTION 7
A solutions architect is designing a new service behind Amazon API Gateway The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth Data can be queried using simple key-value requests
Which combination of AWS services would meet these requirements'? (Select TWO )

• A. AWS Fargate
• B. AWS Lambda
• C. Amazon DynamoDB
• D. Amazon EC2 Auto Scaling
• E. MySQL-compatible Amazon Aurora

Answer: BC

NEW QUESTION 8
A company runs an application in a branch office within a small data closet with no virtualized compute resources. The application data is stored on an NFS volume. Compliance standards require a daily offsite backup of the NFS volume.
Which solution meet these requirements?

• A. Install an AWS Storage Gateway file gateway on premises to replicate the data to Amazon S3.
• B. Install an AWS Storage Gateway file gateway hardware appliance on premises to replicate the data to Amazon S3.
• C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate the data to Amazon S3.
• D. Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate the data to Amazon S3.

Answer: C

NEW QUESTION 9
A company serves content to its subscribers across the world using an application running on AWS The application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB) Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access for certain countries
Which action will meet these requirements?

• A. Modify the ALB security group to deny incoming traffic from blocked countries
• B. Modify the security group for EC2 instances to deny incoming traffic from blocked countries
• C. Use Amazon CloudFront to serve the application and deny access to blocked countries
• D. Use ALB listener rules to return access denied responses to incoming traffic from blocked countries

Answer: C

NEW QUESTION 10
A company’s website is using an Amazon RDS MySQL Multi-AZ DB instance for its transactional data storage.
There are other internal systems that query this DB instance to fetch data for internal batch processing. The RDS DB instance slows down significantly the internal systems fetch data. This impacts the website’s read and write performance, and the users experience slow response times.
Which solution will improve the website's performance?

• A. Use an RDS PostgreSQL DB instance instead of a MySQL database.
• B. Use Amazon ElastiCache to cache the query responses for the website.
• C. Add an additional Availability Zone to the current RDS MySQL Multi.AZ DB instance.
• D. Add a read replica to the RDS DB instance and configure the internal systems to query the read replica.

Answer: D

NEW QUESTION 11
A gaming company has multiple Amazon EC2 instances in a single Availability Zone for its multiplayer game that communicates with users on Layer 4 The chief technology officer (CTO) wants to make the architecture highly available and cost-effective.
What should a solutions architect do to meet these requirements? (Select TWO.)

• A. Increase the number of EC2 instances.
• B. Decrease the number of EC2 instances
• C. Configure a Network Load Balancer in front of the EC2 instances.
• D. Configure an Application Load Balancer in front of the EC2 instances
• E. Configure an Auto Scaling group to add or remove instances in multiple Availability Zones automatically.

Answer: CE

NEW QUESTION 12
A company is planning to use Amazon S3 lo store images uploaded by its users The images must be encrypted at rest in Amazon S3 The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys
What should a solutions architect use to accomplish this?

• A. Server-Side Encryption with keys stored in an S3 bucket
• B. Server-Side Encryption with Customer-Provided Keys (SSE-C)
• C. Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)
• D. Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)

Answer: C

NEW QUESTION 13
A company is hosting a web application on AWS using a single Amazon EC2 instance that stores
user-uploaded documents in an Amazon EBS volume For better scalability and availability the company duplicated the architecture and created a second EC2 instance and EBS volume in another Availability Zone: placing both behind an Application Load Balancer After completing this change users reported that each time they refreshed the website they could see one subset of their documents or the other but never all of the documents at the same time
What should a solutions architect propose to ensure users see all of their documents at once''

• A. Copy the data so both EBS volumes contain all the documents
• B. Configure the Application Load Balancer to direct a user to the server with the documents
• C. Copy the data from both EBS volumes to Amazon EFS Modify the application to save new documents to Amazon EPS
• D. Configure the Application Load Balancer to send the request to both servers Return each document from the correct server

Answer: C

NEW QUESTION 14
A company’s web application uses an Amazon RDS PostgreSQL DB instance to store its application data. During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

• A. Create a read replica and direct reporting traffic to the replica.
• B. Create a Multi-AZ database and direct reporting traffic to the standby.
• C. Create a cross-Region read replica and direct reporting traffic to the replica.
• D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.

Answer: B

NEW QUESTION 15
A company's website is used to sell products to the public The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against SQL injection attacks The ALB is the origin for the CloudFront distribution A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website
What should a solutions architect do to protect the application"?

• A. Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address
• B. Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address
• C. Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address
• D. Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address

Answer: B

NEW QUESTION 16
A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office to Amazon S3 Glacier The solution must avoid saturating the branch office's low-bandwidth internet connection
What is the MOST cost-effective solution1?

• A. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly Create a bucket policy to enforce a VPC endpoint
• B. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination Create a bucket policy to enforce a VPC endpoint
• C. Mount the network-attached file system to Amazon S3 and copy the files directl
• D. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier
• E. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier

Answer: D

NEW QUESTION 17
A data science team requires storage for nightly log processing The size and number of logs is unknown and will persist for 24 hours only What is the MOST cost-effective solution?

• A. Amazon S3 Glacier
• B. Amazon S3 Standard
• C. Amazon S3 intelligent-Tiering
• D. Amazon S3 One Zone-Infrequent Access {S3 One Zone-IA)

Answer: B

NEW QUESTION 18
A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB) The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures
What should the solutions architect recommend?

• A. Leverage Amazon CloudFront with the ALB endpoint as the origin
• B. Deploy an appropriate managed rule for AWS WAF and associate it with the ALB
• C. Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked
• D. Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances

Answer: B

NEW QUESTION 19
An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database
What should the solutions architect do to separate the read requests from the write requests?

• A. Enable read-through caching on the Amazon Aurora database
• B. Update the application to read from the Multi-AZ standby instance
• C. Create a read replica and modify the application to use the appropriate endpoint
• D. Create a second Amazon Aurora database and link it to the primary database as a read replica.

Answer: C

NEW QUESTION 20
A company has application running on Amazon EC2 instances in a VPC. One of the applications needs to call an Amazon S3 API to store and read objects. The company’s security policies restrict any internet-bound traffic from the applications.
Which action will fulfill these requirements and maintain security?

• A. Configure an S3 interface endpoint.
• B. Configure an S3 gateway endpoint.
• C. Create an S3 bucket in a private subnet.
• D. Create an S3 bucket in the same Region as the EC2 instance.

Answer: C

NEW QUESTION 21
An application runs on Amazon EC2 instances across multiple Availability Zones The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer The application performs best when the CPU utilization of the EC2 instances is at or near 40%
What should a solutions architect do to maintain the desired performance across all instances m the group?

• A. Use a simple scaling policy to dynamically scale the Auto Scaling group
• B. Use a target tracking policy to dynamically scale the Auto Scaling group
• C. Use an AWS Lambda function to update the desired Auto Scaling group capacity
• D. Use scheduled scaling actions to scale up and scale down the Auto Scaling group

Answer: D

NEW QUESTION 22
A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?

• A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
• B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.
• C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period
• D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens

Answer: B

NEW QUESTION 23
A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access
Which of the following would be the LEAST complicated implementation?

• A. Use an Amazon CloudFront distribution with an origin access identity (OAI) Configure the distribution with an Amazon S3 origin to provide access to the file through signed URL’s Design a Lambda function to remove data that is older than 14 days.
• B. Use an S3 bucket and provide direct access to the tile Design the application to track purchases in a DynamoDH tableConfigure a Lambda function to remove data that is older than 14 days based on a query to Amazon DynamoDB
• C. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to sot an expiration of 14 days for the URL
• D. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to set an expiration of 60 minutes for the URL and recreate the URL as necessary

Answer: C

NEW QUESTION 24
A solutions architect is designing a high performance computing (HPC) workload on Amazon EC2 The EC2 instances need to communicate to each other frequently and require network performance with low latency and high throughput
Which EC2 configuration meets these requirements'?

• A. Launch the EC2 instances in a cluster placement group in one Availability Zone
• B. Launch the EC2 instances in a spread placement group in one Availability Zone
• C. Launch the EC2 instances in an Auto Scaling group in two Regions and peer the VPCs
• D. Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones

Answer: A

NEW QUESTION 25
......