2020 SAA-C02 Actual Exam Dumps - SAA-C02 Practice Questions
                                               A    MAZON
 SAA-C02   Dumps PDF
https://www.realexamcollectiVoenrs.iocno: mDe/maomazon/saa-c02-dumps.html
Implementing Cisco
E
outing and Services
(ENARSI)
Web: www.exams4sure.com
★ Instant Download★  PDF And VCE★  100% Passing Guarantee★  100% Money Back Guarantee 
 
QUESTION 1 
A solutions architect has created a new AWS account and must secure AWS account root user 
access. 
Which combination of actions will accomplish this? (Select TWO.) 
 
A. Ensure the root user uses a strong password 
B. Enable multi-factor authentication to the root user 
C. Store root user access keys in an encrypted Amazon S3 bucket 
D. Add the root user to a group containing administrative permissions. 
E. Apply the required permissions to the root user with an inline policy document 
 
Answer: AB 
Explanation: 
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html 
 
 
QUESTION 2 
Amazon EBS provides the ability to create backups of any Amazon EC2 volume into what is 
known as _____. 
 
A. snapshots 
B. images 
C. instance backups 
D. mirrors 
 
Answer: A 
Explanation: 
Amazon allows you to make backups of the data stored in your EBS volumes through snapshots 
that can later be used to create a new EBS volume. 
Reference: http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/Storage.html 
 
 
QUESTION  
A company is migrating from an on-premises infrastructure to the AWS Cloud. 
One of the company's applications stores files on a Windows file server farm that uses Distributed 
File System Replication (DFSR) to keep data in sync. 
A solutions architect needs to replace the file server farm. 
Which service should the solutions architect use? 
 
A. Amazon EFS 
B. Amazon FSx 
C. Amazon S3 
D. AWS Storage Gateway 
 
Answer: B 
Explanation: 
https://docs.aws.amazon.com/fsx/latest/WindowsGuide/migrate-files-to-fsx-datasync.html 
 
 
QUESTION 4 
A company's website is used to sell products to the public. 
The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load 
Balancer (ALB). 
There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against 
                                                                                
2  
★ Instant Download★  PDF And VCE★  100% Passing Guarantee★  100% Money Back Guarantee 
 
SQL injection attacks. 
The ALB is the origin for the CloudFront distribution. 
A recent review of security logs revealed an external malicious IP that needs to be blocked from 
accessing the website. 
What should a solutions architect do to protect the application? 
 
A. Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP 
address 
B. Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP 
address 
C. Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the 
malicious IP address 
D. Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the 
malicious IP address 
 
Answer: B 
Explanation: 
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-
loadbalancers 
 
 
QUESTION 5 
You are trying to launch an EC2 instance, however the instance seems to go into a terminated 
status immediately. What would probably not be a reason that this is happening? 
 
A. The AMI is missing a required part. 
B. The snapshot is corrupt. 
C. You need to create storage in EBS first. 
D. You've reached your volume limit. 
 
Answer: C 
Explanation: 
Amazon EC2 provides a virtual computing environments, known as an instance. After you launch 
an instance, AWS recommends that you check its status to confirm that it goes from the pending 
status to the running status, the not terminated status. The following are a few reasons why an 
Amazon EBS-backed instance might immediately terminate: 
You've reached your volume limit. 
The AMI is missing a required part. 
The snapshot is corrupt. 
Reference: 
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_InstanceStraightToTerminated.ht
ml 
 
 
QUESTION 6 
To specify a resource in a policy statement, in Amazon EC2, can you use its Amazon Resource 
Name (ARN)? 
 
A. Yes, you can. 
B. No, you can't because EC2 is not related to ARN. 
C. No, you can't because you can't specify a particular Amazon EC2 resource in an IAM policy. 
D. Yes, you can but only for the resources that are not affected by the action. 
 
Answer: A 
                                                                                
3  
★ Instant Download★  PDF And VCE★  100% Passing Guarantee★  100% Money Back Guarantee 
 
Explanation: 
Some Amazon EC2 API actions allow you to include specific resources in your policy that can be 
created or modified by the action. To specify a resource in the statement, you need to use its 
Amazon Resource Name (ARN). 
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-ug.pdf 
 
 
QUESTION 7 
After you recommend Amazon Redshift to a client as an alternative solution to paying data 
warehouses to analyze his data, your client asks you to explain why you are recommending 
Redshift. Which of the following would be a reasonable response to his request? 
 
A. It has high performance at scale as data and query complexity grows. 
B. It prevents reporting and analytic processing from interfering with the performance of OLTP 
workloads. 
C. You don't have the administrative burden of running your own data warehouse and dealing with 
setup, durability, monitoring, scaling, and patching. 
D. All answers listed are a reasonable response to his question 
 
Answer: D 
Explanation: 
Amazon Redshift delivers fast query performance by using columnar storage technology to 
improve I/O efficiency and parallelizing queries across multiple nodes. Redshift uses standard 
PostgreSQL JDBC and ODBC drivers, allowing you to use a wide range of familiar SQL clients. 
Data load speed scales linearly with cluster size, with integrations to Amazon S3, Amazon 
DynamoDB, Amazon Elastic MapReduce, Amazon Kinesis or any SSH-enabled host. AWS 
recommends Amazon Redshift for customers who have a combination of needs, such as: 
High performance at scale as data and query complexity grows Desire to prevent reporting and 
analytic processing from interfering with the performance of OLTP workloads Large volumes of 
structured data to persist and query using standard SQL and existing BI tools Desire to the 
administrative burden of running one's own data warehouse and dealing with setup, durability, 
monitoring, scaling and patching 
Reference: https://aws.amazon.com/running_databases/#redshift_anchor 
 
 
QUESTION 8 
One of the criteria for a new deployment is that the customer wants to use AWS Storage 
Gateway. However you are not sure whether you should use gateway-cached volumes or 
gateway-stored volumes or even what the differences are. Which statement below best describes 
those differences? 
 
A. Gateway-cached lets you store your data in Amazon Simple Storage Service (Amazon S3) and 
retain a copy of frequently accessed data subsets locally.  
Gateway-stored enables you to configure your on-premises gateway to store all your data locally 
and then asynchronously back up point-in-time snapshots of this data to Amazon S3. 
B. Gateway-cached is free whilst gateway-stored is not. 
C. Gateway-cached is up to 10 times faster than gateway-stored. 
D. Gateway-stored lets you store your data in Amazon Simple Storage Service (Amazon S3) and 
retain a copy of frequently accessed data subsets locally.  
Gateway-cached enables you to configure your on-premises gateway to store all your data locally 
and then asynchronously back up point-in-time snapshots of this data to Amazon S3. 
 
Answer: A 
Explanation: 
Volume gateways provide cloud-backed storage volumes that you can mount as Internet Small 
                                                                                
4  
★ Instant Download★  PDF And VCE★  100% Passing Guarantee★  100% Money Back Guarantee 
 
Computer System Interface (iSCSI) devices from your on-premises application servers. The 
gateway supports the following volume configurations: 
Gateway-cached volumes ?You store your data in Amazon Simple Storage Service (Amazon S3) 
and retain a copy of frequently accessed data subsets locally. Gateway-cached volumes offer a 
substantial cost savings on primary storage and minimize the need to scale your storage on- 
premises. You also retain low-latency access to your frequently accessed data. Gateway-stored 
volumes ?If you need low-latency access to your entire data set, you can configure your on- 
premises gateway to store all your data locally and then asynchronously back up point-in-time 
snapshots of this data to Amazon S3. This configuration provides durable and inexpensive off-site 
backups that you can recover to your local data center or Amazon EC2. For example, if you need 
replacement capacity for disaster recovery, you can recover the backups to Amazon EC2.  
Reference: http://docs.aws.amazon.com/storagegateway/latest/userguide/volume-gateway.html 
 
 
QUESTION 9 
A user is launching an EC2 instance in the US East region. Which of the below mentioned 
options is recommended by AWS with respect to the selection of the availability zone? 
 
A. Always select the AZ while launching an instance 
B. Always select the US-East-1-a zone for HA 
C. Do not select the AZ; instead let AWS select the AZ 
D. The user can never select the availability zone while launching an instance 
 
Answer: C 
Explanation: 
When launching an instance with EC2, AWS recommends not to select the availability zone (AZ). 
AWS specifies that the default Availability Zone should be accepted. This is because it enables 
AWS to select the best Availability Zone based on the system health and available capacity. If the 
user launches additional instances, only then an Availability Zone should be specified. This is to 
specify the same or different AZ from the running instances.  
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-
zones.html 
 
 
QUESTION 10 
Can a user get a notification of each instance start / terminate configured with Auto Scaling? 
 
A. Yes, if configured with the Launch Config 
B. Yes, always 
C. Yes, if configured with the Auto Scaling group 
D. No 
 
Answer: C 
Explanation: 
The user can get notifications using SNS if he has configured the notifications while creating the 
Auto Scaling group. 
Reference: 
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/GettingStartedTutorial.html 
 
 
https://www.realexamcollection.com/amazon/saa-c02-dumps.html
                                                                                
5