Update AWS Certified Solutions Architect - Associate (SAA-C02) SAA-C02 Exam

NEW QUESTION 1
A manufacturing company wants to implement predictive maintenance on its machinery equipment The company will install thousands of loT sensors that will send data to AWS in real time A solutions architect is tasked with implementing a solution that will receive events in an ordered manner for each machinery asset and ensure that data is saved for further processing at a later time
Which solution would be MOST efficient?

• A. Use Amazon Kinesis Data Streams for real-time events with a partition for each equipment asset Use Amazon Kinesis Data Firehose to save data to Amazon S3
• B. Use Amazon Kinesis Data Streams for real-time events with a shard for each equipment asset Use Amazon Kinesis Data Firehose to save data to Amazon EBS
• C. Use an Amazon SQS FIFO queue for real-time events with one queue for each equipment asset Trigger an AWS Lambda function for the SQS queue to save data to Amazon EFS
• D. Use an Amazon SQS standard queue for real-time events with one queue for each equipment asset Trigger an AWS Lambda function from the SQS queue to save data to Amazon S3

Answer: A

NEW QUESTION 2
A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch executes This causes the CPU utilization of the EC2 instances to immediately peak to 100%. which disrupts the application
What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

• A. Configure an Amazon CloudFront distribution in front of the ALB
• B. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization
• C. Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
• D. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances

Answer: C

NEW QUESTION 3
A company currently operates a web application backed by an Amazon RDS MySQL database It has automated backups that are run daily and are not encrypted A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed The company will make at least one encrypted backup before destroying the old backups
What should be done to enable encryption for future backups''

• A. Enable default encryption for the Amazon S3 bucket where backups are stored
• B. Modify the backup section of the database configuration to toggle the Enable encryption check box
• C. Create a snapshot of the database Copy it to an encrypted snapshot Restore the database from the encrypted snapshot
• D. Enable an encrypted read replica on RDS for MySQL Promote the encrypted read replica to primary Remove the original database instance

Answer: C

NEW QUESTION 4
A company must generate sales reports at the beginning of every month. The reporting process launches 20 Amazon EC2 instances on the first of the month. The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?

• A. Reserved Instances
• B. Spot Block Instances
• C. On-Demand Instances
• D. Scheduled Reserved Instances D18912E1457D5D1DDCBD40AB3BF70D5D

Answer: C

NEW QUESTION 5
A company has deployed an API in a VPC behind an internet-facing Application Load Balancer (ALB) An application that consumes the API as a client is deployed in a second account in private subnets behind a NAT gateway. When requests to the client application increase, the NAT gateway costs are higher than expected. A solutions architect has configured the ALB to be internal.
Which combination of architectural changes will reduce the NAT gateway costs'? (Select TWO )

• A. Configure a VPC peering connection between the two VPC
• B. Access the API using the private address
• C. Configure an AWS Direct Connect connection between the two VPC
• D. Access the API using the private address.
• E. Configure a ClassicLink connection for the API into the client VPC Access the API using the ClassicLink address.
• F. Configure a PrivateLink connection for the API into the client VP
• G. Access the API using the PrivateLink address.
• H. Configure an AWS Resource Access Manager connection between the two accounts Access the API using the private address

Answer: DE

NEW QUESTION 6
A company's application is running on Amazon EC2 instances m a single Region in the event of a disaster a solutions architect needs to ensure that the resources can also be deployed to a second Region
Which combination of actions should the solutions architect take to accomplish this-? (Select TWO)

• A. Detach a volume on an EC2 instance and copy it to Amazon S3
• B. Launch a new EC2 instance from an Amazon Machine image (AMI) in a new Region
• C. Launch a new EC2 instance in a new Region and copy a volume from Amazon S3 to the new instance
• D. Copy an Amazon Machine Image (AMI) of an EC2 instance and specify a different Region for the destination
• E. Copy an Amazon Elastic Block Store (Amazon EBS) volume from Amazon S3 and launch an EC2 instance in the destination Region using that EBS volume

Answer: BD

NEW QUESTION 7
A company allows its developers to attach existing 1AM policies to existing 1AM roles to enable (aster experimentation and agility However the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies
How should a solutions architect address this issue?

• A. Create an Amazon SNS topic to send an alert every time a developer creates a new policy
• B. Use service control policies to disable IAM activity across all accounts in the organizational unit
• C. Prevent the developers from attaching any policies and assign all 1AM duties to the security operations team
• D. Set an IAM permissions boundary on the developer 1AM role that explicitly denies attaching the administrator policy

Answer: D

Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html

NEW QUESTION 8
A media streaming company collects real-time data and stores it in a disk-optimized database system The company is not getting the expected throughput and wants an in-memory database storage solution that performs faster and provides high availability using data replication.
Which database should a solutions architect recommend'?

• A. Amazon RDS for MySQL
• B. Amazon RDS for PostgreSQL
• C. Amazon ElastiCache for Redis
• D. Amazon ElastiCache for Memcached

Answer: C

NEW QUESTION 9
A web application is deployed in the AWS Cloud It consists of a two-tier architecture that includes a web layer and a database layer The web server is vulnerable to cross-site scripting (XSS) attacks
What should a solutions architect do to remediate the vulnerability?

• A. Create a Classic Load Balancer Put the web layer behind the load balancer and enable AWS WAF
• B. Create a Network Load Balancer Put the web layer behind the load balancer and enable AWS WAF
• C. Create an Application Load Balancer Put the web layer behind the load balancer and enable AWS WAF
• D. Create an Application Load Balancer Put the web layer behind the load balancer and use AWS Shield Standard

Answer: C

NEW QUESTION 10
A company captures clickstream data from multiple websites and analyzes it using batch processing. The data is loaded nightly into Amazon Redshift and is consumed by business analysts. The company wants to move towards near-real-time data processing for timely insights. The solution should process the streaming data with minimal effort and operational overhead.
Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)

• A. Amazon EC2
• B. AWS Lambda
• C. Amazon Kinesis Data Streams
• D. Amazon Kinesis Data Firehose
• E. Amazon Kinesis Data Analytics

Answer: AD

NEW QUESTION 11
An application runs on Amazon EC2 instances across multiple Availability Zones The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer The application performs best when the CPU utilization of the EC2 instances is at or near 40%
What should a solutions architect do to maintain the desired performance across all instances m the group?

• A. Use a simple scaling policy to dynamically scale the Auto Scaling group
• B. Use a target tracking policy to dynamically scale the Auto Scaling group
• C. Use an AWS Lambda function to update the desired Auto Scaling group capacity
• D. Use scheduled scaling actions to scale up and scale down the Auto Scaling group

Answer: D

NEW QUESTION 12
A company built a food ordering application that captures user data and stores it for future analysis The application's static front end is deployed on an Amazon EC2 instance The front-end application sends the requests to the backend application running on separate EC2 instance The backend application then stores the data in Amazon RDS
What should a solutions architect do to decouple the architecture and make it scalable''

• A. Use Amazon S3 to serve the front-end application which sends requests to Amazon EC2 to execute the backend application The backend application will process and store the data in Amazon RDS
• B. Use Amazon S3 to serve the front-end application and write requests to an Amazon Simple Notification Service (Amazon SNS) topic Subscribe Amazon EC2 instances to the HTTP/HTTPS endpoint of the topic and process and store the data in Amazon RDS
• C. Use an EC2 instance to serve the front end and write requests to an Amazon SQS queue Place the backend instance in an Auto Scaling group and scale based on the queue depth to process and store the data in Amazon RDS
• D. Use Amazon S3 to serve the static front-end application and send requests to Amazon API Gateway which writes the requests to an Amazon SQS queue Place the backend instances in an Auto Scaling group and scale based on the queue depth to process and store the data in Amazon RDS

Answer: D

NEW QUESTION 13
A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand The event is expected to attract a global online audience
Which service will improve the performance of both the real-time and on-demand streaming?

• A. Amazon CloudFront
• B. AWS Global Accelerator
• C. Amazon Route 53
• D. Amazon S3 Transfer Acceleration

Answer: A

NEW QUESTION 14
A company hosts its product information webpages on AWS. The existing solution uses multiple Amazon C2 instances behind an Application Load Balancer in an Auto Scaling group. The website also uses a custom DNS name and communicates with HTTPS only using a dedicated SSL certificate. The company is planning a new product launch and wants to be sure that users from around the world have the best possible experience on the new website.
What should a solutions architect do to meet these requirements?

• A. Redesign the application to use Amazon CloudFront.
• B. Redesign the application to use AWS Elastic Beanstalk.
• C. Redesign the application to use a Network Load Balancer.
• D. Redesign the application to use Amazon S3 static website hosting.

Answer: A

NEW QUESTION 15
A solutions architect is designing an application for a two-step order process The first step is synchronous and must return to the user with little latency The second step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are received
How should the solutions architect integrate these components?

• A. Use Amazon SQS FIFO queues.
• B. Use an AWS Lambda function along with Amazon SQS standard queues
• C. Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic
• D. Create an SNS topic and subscribe an Amazon SQS Standard queue to that topic.

Answer: C

NEW QUESTION 16
A company runs an application in a branch office within a small data closet with no virtualized compute resources. The application data is stored on an NFS volume. Compliance standards require a daily offsite backup of the NFS volume.
Which solution meet these requirements?

• A. Install an AWS Storage Gateway file gateway on premises to replicate the data to Amazon S3.
• B. Install an AWS Storage Gateway file gateway hardware appliance on premises to replicate the data to Amazon S3.
• C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate the data to Amazon S3.
• D. Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate the data to Amazon S3.

Answer: C

NEW QUESTION 17
A company runs an application on a group of Amazon Linux EC2 instances The application writes log files using standard API calls For compliance reasons, all log files must be retained indefinitely and will be analyzed by a reporting tool that must access all files concurrently
Which storage service should a solutions architect use to provide the MOST cost-effective solution?

• A. Amazon EBS
• B. Amazon EFS
• C. Amazon EC2 instance store
• D. Amazon S3

Answer: D

NEW QUESTION 18
A financial services company has a web application that serves users in the United States and Europe The application consists of a database tier and a web server tier The database tier consists of a MySQL database hosted in us-east-1 Amazon Route 53 geoproximity routing is used to direct traffic to instances in the closest Region A performance review of the system reveals that European users are not receiving the same level of query performance as those in the United States
Which changes should be made to the database tier to improve performance?

• A. Migrate the database to Amazon RDS for MySQL Configure Multi-AZ in one of the European Regions
• B. Migrate the database to Amazon DynamoDB Use DynamoDB global tables to enable replication to additional Regions
• C. Deploy MySQL instances in each Region Deploy an Application Load Balancer in front of MySQL to reduce the load on the primary instance
• D. Migrate the database to an Amazon Aurora global database in MySQL compatibility mode Configure read replicas in one of the European Regions

Answer: D

NEW QUESTION 19
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history, the company anticipates a spike in traffic during a holiday each year A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users
Which solution will meet these requirements?

• A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%
• B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand
• C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period
• D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are auto scaling EC2_INSTANCE_LAUNCH events

Answer: B

NEW QUESTION 20
A solutions architect is implementing a document review application using an Amazon S3 bucket for storage
The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download, modify, and upload documents
Which combination of actions should be taken to meet these requirements'? (Select TWO )

• A. Enable a read-only bucket ACL
• B. Enable versioning on the bucket
• C. Attach an 1AM policy to the bucket
• D. Enable MFA Delete on the bucket
• E. Encrypt the bucket using AWS KMS

Answer: BD

NEW QUESTION 21
A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?

• A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
• B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.
• C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period
• D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens

Answer: B

NEW QUESTION 22
A solutions architect is deploying a distributed database on multiple Amazon EC2 instances The database stores all data on multiple instances so it can withstand the loss of an instance The database requires block storage with latency and throughput to support several million transactions per second per server
Which storage solution should the solutions architect use?

• A. Amazon EBS
• B. Amazon EC2 instance store
• C. Amazon EFS
• D. Amazon S3

Answer: B

NEW QUESTION 23
......