AWS-Solutions-Associate Pre-Exam Practice Tests | (Updated 686 Questions)
Valid AWS-Solutions-Associate Exam Q&A PDF - One Year Free Update
The AWS Certified Solutions Architect - Associate (SAA-C02) is a certification exam offered by Amazon Web Services (AWS) for professionals who want to demonstrate their expertise in designing and deploying scalable systems on AWS infrastructure. AWS Certified Solutions Architect - Associate (SAA-C02) certification is designed for individuals who have a good understanding of AWS services and features, and want to showcase their skills in designing and deploying scalable and reliable applications on AWS.
The AWS-Solutions-Associate (AWS Certified Solutions Architect - Associate (SAA-C02)) Certification Exam is a valuable credential for IT professionals who work with AWS. It validates the skills and knowledge necessary to design and deploy scalable, highly available, and fault-tolerant systems on the AWS platform. To prepare for the exam, candidates should take advantage of the many resources available from AWS and third-party training providers. With the certification, IT professionals can advance their careers and increase their earning potential while demonstrating their expertise and knowledge of AWS services.
NEW QUESTION # 112
A company creates business-critical 30 images every night. The images are batch-processed every Friday and require an uninterrupted 48 hours to complete.
What is the MOST cost-effective Amazon EC2 pricing model for this scenario?
- A. Reserved Instances
- B. On-Demand Instances
- C. Spot Instances
- D. Scheduled Reserved Instances
Answer: D
NEW QUESTION # 113
What does a "Domain" refer to in Amazon SWF?
- A. A special type of worker
- B. A collection of related Workflows
- C. A security group in which only tasks inside can communicate with each other
- D. The DNS record for the Amazon SWF service
Answer: B
NEW QUESTION # 114
A company's website handles millions of requests each day, and the number of requests continues to increase.
A solutions architect needs to improve the response time of the web application. The solutions architect determines that the application needs to decrease latency when retrieving product details from the Amazon DynamoDB table.
Which solution will meet these requirements with the LEAST amount of operational overhead?
- A. Set up Amazon DynamoDB Streams on the table, and have AWS Lambda read from the table and populate Amazon ElastiCache. Route all read requests through ElastiCache.
- B. Set up Amazon ElastiCache for Redis between the DynamoDB table and the web application. Route all read requests through Redis.
- C. Set up a DynamoDB Accelerator (DAX) cluster. Route all read requests through DAX.
- D. Set up Amazon ElastiCache for Memcached between the DynamoDB table and the web application.
Route all read requests through Memcached.
Answer: C
Explanation:
it allows the company to improve the response time of the web application and decrease latency when retrieving product details from the Amazon DynamoDB table. By setting up a DynamoDB Accelerator (DAX) cluster, the company can use a fully managed, highly available, in-memory cache for DynamoDB that delivers up to a 10x performance improvement. By routing all read requests through DAX, the company can reduce the number of read operations on the DynamoDB table and improve the user experience. References:
Amazon DynamoDB Accelerator (DAX)
Using DAX with DynamoDB
NEW QUESTION # 115
A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on- premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. The company must preserve the existing investment in the on- premises backup applications and workflows.
What should a solutions architect recommend?
- A. Set up AWS Storage Gateway to connect with the backup applications using the NFS interface.
- B. Set up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface.
- C. Set up an Amazon EFS file system that connects with the backup applications using the iSCSI interface.
- D. Set up an Amazon EFS file system that connects with the backup applications using the NFS interface.
Answer: B
Explanation:
it allows the company to simplify the on-premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. By setting up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface, the company can store backup data on virtual tapes in S3 or Glacier. This preserves the existing investment in the on-premises backup applications and workflows while leveraging AWS storage services. References:
AWS Storage Gateway
Tape Gateway
NEW QUESTION # 116
A company allows users to upload and store photos through its website The website has users from all around the world. All images that users upload are stored in a centralized Amazon S3 bucket The company wants to increase the speed in which its entire user base can upload photos through the website.
What should a solutions architect recommend to meet these requirements?
- A. Configure S3 Transfer Acceleration on the S3 bucket Use the S3 Accelerate endpoint to upload files
- B. Create an Amazon CloudFront distribution. Use the Amazon S3 Standard storage class to store files
- C. Create an Amazon CloudFront distribution. Configure the distribution settings and origin.
- D. Configure S3 Transfer Acceleration on the S3 bucket Use the standard S3 endpoint to upload files
Answer: A
NEW QUESTION # 117
A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to run an application. The company creates one snapshot of each EBS volume every day to meet compliance requirements. The company wants to implement an architecture that prevents the accidental deletion of EBS volume snapshots. The solution must not change the administrative rights of the storage administrator user.
Which solution will meet these requirements with the LEAST administrative effort?
- A. Create an 1AM role that has permission to delete snapshots. Attach the role to a new EC2 instance. Use the AWS CLI from the new EC2 instance to delete snapshots.
- B. Add tags to the snapshots. Create retention rules in Recycle Bin for EBS snapshots that have the tags.
- C. Create an 1AM policy that denies snapshot deletion. Attach the policy to the storage administrator user.
- D. Lock the EBS snapshots to prevent deletion.
Answer: D
Explanation:
EBS snapshots are point-in-time backups of EBS volumes that can be used to restore data or create new volumes. EBS snapshots can be locked to prevent accidental deletion using a feature called EBS Snapshot Lock. When a snapshot is locked, it cannot be deleted by any user, including the root user, until it is unlocked.
The lock policy can also specify a retention period, after which the snapshot can be deleted. This solution will meet the requirements with the least administrative effort, as it does not require any code development or policy changes.
References:
1 explains how to lock and unlock EBS snapshots using EBS Snapshot Lock.
2 describes the concept and benefits of EBS snapshots.
NEW QUESTION # 118
A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials needs to be removed from the Lambda source code. The credentials must then be securely stored and rotated on a on-going basis to meet security policy requirements.
What should a solutions architect recommend meet these requirements?
- A. Store the password in AWS CloudHSM. Associate the Lambda function with a role that can review the password from CloudHSM given key ID.
- B. Move the database password to an environment variable associate the Lambda function Retrieve the password from the environment variable upon execution.
- C. Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID.
- D. Store the password in AWS Secrets Manager . A associate the Lambda function with a role that can retrieve the password from secrets Manager given its secret ID.
Answer: D
NEW QUESTION # 119
A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises, file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.
What should a solutions architect recommend to meet these requirements?
- A. Deploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.
- B. Attach an Amazon Elastic File System (Amazon EFS) file system to each clinic's on-premises servers.
- C. Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic
- D. Migrate the files to each clinic's on-premises applications by using AWS DataSync for processing.
Answer: C
Explanation:
AWS Storage Gateway is a service that connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between an organization's on-premises IT environment and AWS's storage infrastructure. By deploying a file gateway as a virtual machine on each clinic's premises, the medical research lab can provide low-latency access to the data stored in the S3 bucket while maintaining read-only permissions for each clinic. This solution allows the clinics to access the data files directly from their on-premises file-based applications without the need for data transfer or migration.
NEW QUESTION # 120
A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account. Which solution will meet these requirement in the MOST secure manner?
- A. Apply an IAM role to the Lambda function Apply an IAM policy to the role to grant read access to the S3 bucket
- B. Embed an access key and a secret key In the Lambda function's coda to grant the required IAM permissions for read access to the S3 bucket
- C. Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to all S3 buckets In the account
- D. Apply an S3 bucket pokey that grants road access to the S3 bucket
Answer: A
Explanation:
This option is the most secure because it follows the principle of least privilege and grants only the necessary permissions to the Lambda function without exposing any credentials in the code. The IAM role can be configured as the Lambda function's execution role and the IAM policy can specify the S3 bucket ARN and the s3:GetObject action12. Option A is less secure because it grants read access to any principal that has access to the S3 bucket, which could be more than the Lambda function. Option C is less secure because it embeds credentials in the code, which could be compromised or exposed. Option D is less secure because it grants read access to all S3 buckets in the account, which could be more than what the Lambda function needs.
NEW QUESTION # 121
Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an _____________ node in the response from the Amazon RDS API.
- A. Error
- B. FALSE
- C. Incorrect
Answer: A
NEW QUESTION # 122
A Solution Architect is creating a multi-tier architecture for an application that includes a public-facing web tier . Security requirements state that the Amazon EC2 instances running in the application tier must not be accessibility directly from the internet.
requirements state that the Amazon EC2 instances running in the application tier must not be accessible directly from the internet What should be done to accomplish this?
- A. Create a multi-VPC peering mesh with network access rules limiting communications to specific ports Implement an internet gateway on each VPC for external connectivity.
- B. Place all instances in a single Amazon VPC with AWS WAF" as the web front-end communication conduit Configure a NAT gateway for external communications.
- C. Use VPC peering to peer with on-premises hardware Direct enterprise traffic through the VPC peer connection to the instances hosted in the private VPC.
- D. Deploy the web and application instances in a private subnet. Provision an Application Load Balancer in the public Install an internet gateway and use security groups to control communications between the layers.
Answer: D
NEW QUESTION # 123
Which of the following components of AWS Data Pipeline polls for tasks and then performs those tasks?
- A. AWS Direct Connect
- B. Pipeline Definition
- C. Task Runner
- D. Amazon Elastic MapReduce (EMR)
Answer: C
Explanation:
Explanation/Reference:
Explanation:
Task Runner polls for tasks and then performs those tasks.
http://docs.aws.amazon.com/datapipeline/latest/DeveloperGuide/what-is-datapipeline.html
NEW QUESTION # 124
A company has developed a new release of a popular video game and wants to make it available for public download. The new release package is approximately 5 GB in size. The company provides downloads for existing releases from a Linux-based, publicly facing FTP site hosted in an on-premises data center. The company expects the new release will be downloaded by users worldwide. The company wants a solution that provides improved download performance and low transfer costs, regardless of a user's location.
Which solutions will meet these requirements?
- A. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting. Upload the game files to the S3 bucket. Set Requester Pays for the S3 bucket. Publish the game download URL for users to download the package.
- B. Store the game files on Amazon EFS volumes that are attached to Amazon EC2 instances within an Auto Scaling group. Configure an FTP service on each of the EC2 instances. Use an Application Load Balancer in front of the Auto Scaling group. Publish the game download URL for users to download the package.
- C. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting. Upload the game files to the S3 bucket. Use Amazon CloudFront for the website. Publish the game download URL for users to download the package.
- D. Store the game files on Amazon EBS volumes mounted on Amazon EC2 instances within an Auto Scaling group. Configure an FTP service on the EC2 instances. Use an Application Load Balancer in front of the Auto Scaling group. Publish the game download URL for users to download the package.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION # 125
An organization designs a mobile application for their customers to upload photos to a site The application needs a secure login with MFA. The organization wants to limit the initial build time and maintenance of the solution.
Which solution should a Solutions Architect recommend to meet the requirements?
- A. Use Amazon API Gateway and require SSE for photos.
- B. Federate IAM against corporate AD that requires MFA.
- C. Edit AWS IAM policies to require MFA for all users.
- D. Use Amazon Cognito Identity with SMS-based MFA
Answer: D
NEW QUESTION # 126
Can you configure multiple Load Balancers with a single Auto Scaling group?
- A. Yes, you can but only if it is configured with Amazon Redshift.
- B. Yes
- C. Yes, you can provide the ELB is configured with Amazon AppStream.
- D. No
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Yes, you can configure more than one load balancer with an autoscaling group. Auto Scaling integrates with Elastic Load Balancing to enable you to attach one or more load balancers to an existing Auto Scaling group. After you attach the load balancer, it automatically registers the instances in the group and distributes incoming traffic across the instances.
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/AS_Concepts.html
NEW QUESTION # 127
A company has an application that processes customer of tiers. The company hosts the application on an Amazon EC2 instance that saves the orders to an Amazon Aurora database. Occasionally when traffic Is high, the workload does not process orders fast enough.
What should a solutions architect do to write the orders reliably to the database as quickly as possible?
- A. Increase the instance size of the EC2 instance when baffle Is high. Write orders to Amazon Simple Notification Service (Amazon SNS) Subscribe the database endpoint to the SNS topic
- B. Write orders to an Amazon Simple Queue Service (Amazon SOS) queue Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read born the SQS queue and process orders into the database
- C. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU threshold limits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database
- D. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic. Use EC2 ^stances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.
Answer: B
NEW QUESTION # 128
What does Amazon ElastiCache provide?
- A. A service by this name doesn't exist. Perhaps you mean Amazon CloudCache.
- B. A virtual server with a huge amount of memory.
- C. A managed In-memory cache service.
- D. An Amazon EC2 instance with the Memcached software already pre-installed.
Answer: C
NEW QUESTION # 129
A company runs a three-tier application in AWS. Users report that the application performance can vary greatly depending on the time of day and functionality being accessed.
The application includes the following components:
* Eight t2.large front-end web servers that serve static content and proxy dynamic content from the application tier.
* Four t2.large application servers.
* One db.m4.large Amazon RDS MySQL Multi-AZ DB instance.
Operations has determined that the web and application tiers are network constrained.
Which of the following is a cost effective way to improve application performance? (Choose two.)
- A. Increase the size of the Amazon RDS instance to db.m4.xlarge
- B. Use AWS Auto Scaling and m4.large instances for the web and application tiers
- C. Convert the MySQL RDS instance to a self-managed MySQL cluster on Amazon EC2
- D. Replace web and app tiers with t2.xlarge instances
- E. Create an Amazon CloudFront distribution to cache content
Answer: C,D
NEW QUESTION # 130
A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications.
Which solution will meet these requirements?
- A. MySQL deployed on Amazon EC2 in an Auto Scaling group
- B. MySQL-compatible Amazon Aurora Serverless
- C. Amazon DynamoDB
- D. Amazon RDS for MySQL
Answer: D
NEW QUESTION # 131
......
The AWS Certified Solutions Architect - Associate certification is highly valued in the IT industry, as it demonstrates a candidate's expertise in designing and deploying applications on the AWS platform. AWS Certified Solutions Architect - Associate (SAA-C02) certification is suitable for IT professionals who work with AWS services, such as developers, architects, and sysadmins. The SAA-C02 exam is challenging and requires candidates to have a deep understanding of AWS services, architecture, and deployment best practices. However, passing the exam can help professionals advance their careers and increase their earning potential.
AWS Certified Solutions Architect - Associate (SAA-C02) Free Update Certification Sample Questions: https://www.prep4sures.top/AWS-Solutions-Associate-exam-dumps-torrent.html
Trend for Amazon AWS-Solutions-Associate pdf dumps before actual exam: https://drive.google.com/open?id=1qZjFi5lh68whe9nl_J0CU-KsZge2xgGP