Top Tips Of Down To Date SAA-C02 Study Guide

NEW QUESTION 1
A solutions architect needs to design a managed storage solution for a company's application that includes high-performance machine learning This application runs on AWS Fargate and the connected storage needs to have concurrent access to files and deliver high performance.
Which storage option should the solutions architect recommend?

• A. Create an Amazon S3 bucket for the application and establish an 1AM role for Fargate to communicate with Amazon S3
• B. Create an Amazon FSx for Lustre file share and establish an 1AM role that allows Fargate to communicate with FSx for Lustre.
• C. Create an Amazon Elastic File System (Amazon EFS) file share and establish an 1AM role that allows Fargate to communicate with Amazon EFS.
• D. Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an 1AM role that allows Fargate to communicate with Amazon EBS

Answer: B

NEW QUESTION 2
static website within an Amazon S3 bucket A solutions architect needs t Which action will accomplish this?

• A. Enable Amazon S3 versioning
• B. Enable Amazon S3 Intelligent-Tiering.
• C. Enable an Amazon S3 lifecycle policy
• D. Enable Amazon S3 cross-Region replication.

Answer: A

NEW QUESTION 3
A company wants to migrate a high performance computing (HPC) application and data from on-premises to the AWS Cloud The company uses tiered storage on premises with hot high-performance parallel storage to support the application during periodic runs of the application and more economical cold storage to hold the data when the application is not actively running
Which combination of solutions should a solutions architect recommend to support the storage needs of the application? (Select TWO )

• A. Amazon S3 for cold data storage
• B. Amazon EFS for cold data storage
• C. Amazon S3 for high-performance parallel storage
• D. Amazon FSx for Lustre for high-performance parallel storage
• E. Amazon FSx for Windows for high-performance parallel storage

Answer: AD

NEW QUESTION 4
A company has application running on Amazon EC2 instances in a VPC. One of the applications needs to call an Amazon S3 API to store and read objects. The company’s security policies restrict any internet-bound traffic from the applications.
Which action will fulfill these requirements and maintain security?

• A. Configure an S3 interface endpoint.
• B. Configure an S3 gateway endpoint.
• C. Create an S3 bucket in a private subnet.
• D. Create an S3 bucket in the same Region as the EC2 instance.

Answer: C

NEW QUESTION 5
A solutions architect is designing a new service behind Amazon API Gateway The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth Data can be queried using simple key-value requests
Which combination of AWS services would meet these requirements'? (Select TWO )

• A. AWS Fargate
• B. AWS Lambda
• C. Amazon DynamoDB
• D. Amazon EC2 Auto Scaling
• E. MySQL-compatible Amazon Aurora

Answer: BC

NEW QUESTION 6
A solutions architect is designing storage for a high performance computing (HPC) environment based on Amazon Linux. The workload stores and processes a large amount of engineering drawings that require shared storage and heavy computing.
Which storage option would be the optimal solution?

• A. Amazon Elastic File System (Amazon EFS)
• B. Amazon FSx for Lustre
• C. Amazon EC2 instance store
• D. Amazon EBS Provisioned IOPS SSD (io1)

Answer: B

NEW QUESTION 7
An Amazon EC2 administrator created the following policy associated with an 1AM group containing several users.

What is the effect of this policy?

• A. Users can terminate an EC2 instance in any AWS Region except us-east-1.
• B. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region
• C. Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254
• D. Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100. 100. 254

Answer: C

NEW QUESTION 8
A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet What should the solutions architect do to accomplish this? (Select TWO )

• A. Create a route table entry for the endpoint
• B. Create a gateway endpoint for DynamoDB
• C. Create a new DynamoDB table that uses the endpoint
• D. Create an ENI for the endpoint in each of the subnets of the VPC
• E. Create a security group entry in the default security group to provide access

Answer: AB

NEW QUESTION 9
A company runs an application on a group of Amazon Linux EC2 instances The application writes log files using standard API calls For compliance reasons, all log files must be retained indefinitely and will be analyzed by a reporting tool that must access all files concurrently
Which storage service should a solutions architect use to provide the MOST cost-effective solution?

• A. Amazon EBS
• B. Amazon EFS
• C. Amazon EC2 instance store
• D. Amazon S3

Answer: D

NEW QUESTION 10
A solutions architect is designing a two-tier web application The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet Security is a high priority for the company
How should security groups be configured in this situation? (Select TWO )

• A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0 0 0 0/0
• B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0 0 0 0/0
• C. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier
• D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier
• E. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier

Answer: AC

NEW QUESTION 11
A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch executes This causes the CPU utilization of the EC2 instances to immediately peak to 100%. which disrupts the application
What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

• A. Configure an Amazon CloudFront distribution in front of the ALB
• B. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization
• C. Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
• D. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances

Answer: C

NEW QUESTION 12
A company has a legacy application that processes data in two parts The second part of the process takes longer than the first, so the company has decided to rewrite the application as two microservices running on Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?

• A. Implement code in microservice 1 to send data to an Amazon S3 bucke
• B. Use S3 event notifications to invoke microservice 2.
• C. Implement code in microservice 1 to publish data to an Amazon SNS topic Implement code in microservice 2 to subscribe to this topic
• D. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehos
• E. Implement code in microservice 2 to read from Kinesis Data Firehose.
• F. Implement code in microservice 1 to send data to an Amazon SQS queue Implement code in microservice 2 to process messages from the queue

Answer: C

NEW QUESTION 13
A company’s web application uses an Amazon RDS PostgreSQL DB instance to store its application data. During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

• A. Create a read replica and direct reporting traffic to the replica.
• B. Create a Multi-AZ database and direct reporting traffic to the standby.
• C. Create a cross-Region read replica and direct reporting traffic to the replica.
• D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.

Answer: B

NEW QUESTION 14
A company is planning to use Amazon S3 lo store images uploaded by its users The images must be encrypted at rest in Amazon S3 The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys
What should a solutions architect use to accomplish this?

• A. Server-Side Encryption with keys stored in an S3 bucket
• B. Server-Side Encryption with Customer-Provided Keys (SSE-C)
• C. Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)
• D. Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)

Answer: C

NEW QUESTION 15
A company's production application runs online transaction processing (OLTP) transactions on an Amazon RDS MySQL DB instance The company is launching a new reporting tool that will access the same data The reporting tool must be highly available and not impact the performance of the production application
How can this be achieved'?

• A. Create hourly snapshots of the production RDS DB instance
• B. Create a Multi-AZ RDS Read Replica of the production RDS DB instance
• C. Create multiple RDS Read Replicas of the production RDS DB instance Place the Read Replicas in an Auto Scaling group
• D. Create a Single-AZ RDS Read Replica of the production RDS DB instance Create a second Single-AZ RDS Read Replica from the replica

Answer: B

NEW QUESTION 16
A solutions architect at an ecommerce company wants to back up application log data to Amazon S3 The solutions architect is unsure how frequently the logs will be accessed or which logs will be accessed the most The company wants to keep costs as low as possible by using the appropriate S3 storage class.
Which S3 storage class should be implemented to meet these requirements?

• A. S3 Glacier
• B. S3 Intelligent-Tiering
• C. S3 Standard-Infrequent Access (S3 Standard-IA)
• D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

Answer: D

Explanation:
S3 One Zone-IA is for data that is accessed less frequently, but requires rapid access when needed. Unlike other S3 Storage Classes which store data in a minimum of three Availability Zones (AZs), S3 One Zone-IA stores data in a single AZ and costs 20% less than S3 Standard-IA. S3 One Zone-IA is ideal for customers who want a lower-cost option for infrequently accessed data but do not require the availability and resilience of S3 Standard or S3 Standard-IA. It’s a good choice for storing secondary backup copies of on-premises data or easily re-creatable data. You can also use it as cost-effective storage for data that is replicated from another AWS Region using S3 Cross-Region Replication.

NEW QUESTION 17
A solutions architect is deploying a distributed database on multiple Amazon EC2 instances The database stores all data on multiple instances so it can withstand the loss of an instance The database requires block storage with latency and throughput to support several million transactions per second per server
Which storage solution should the solutions architect use?

• A. Amazon EBS
• B. Amazon EC2 instance store
• C. Amazon EFS
• D. Amazon S3

Answer: B

NEW QUESTION 18
A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds
Which solution should the solutions architect suggest?

• A. Set up an Amazon API Gateway and use Amazon ECS.
• B. Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
• C. Set up an Amazon API Gateway and use AWS Lambda functions
• D. Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling

Answer: C

NEW QUESTION 19
A company has a two-tier application architecture that runs in public and private subnets Amazon EC2 instances running the web application are in the public subnet and a database runs on the private subnet The web application instances and the database are running in a single Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this architecture? (Select TWO.)

• A. Create new public and private subnets in the same AZ for high availability
• B. Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
• C. Add the existing web application instances to an Auto Scaling group behind an Application Load Balancer
• D. Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one AZ
• E. Create new public and private subnets in the same VPC each in a new AZ Migrate the database to an Amazon RDS multi-AZ deployment

Answer: BE

NEW QUESTION 20
A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The website has a mix of dynamic and static content Users around the globe are reporting that the website is slow
Which set of actions will improve website performance for users worldwide?

• A. Create an Amazon CloudFront distribution and configure the ALB as an origin Then update the Amazon Route 53 record to point to the CloudFront distribution
• B. Create a latency-based Amazon Route 53 record for the ALB Then launch new EC2 instances with larger instance sizes and register the instances with the ALB
• C. Launch ne
• D. EC2 instances hosting the same web application in different Regions closer to the users.Then register the instances with the same ALB using cross-Region VPC peering
• E. Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances Then update an Amazon Route 53 record to point to the S3 buckets

Answer: A

NEW QUESTION 21
......