2020 Valid Amazon SAA-C02 Exam Questions
                     Amazon Web Services
SAA-C02
AWS Certified Solutions Architect - Associate (SAA-C02)
[ Total Questions: 10]
https://www.dumpsforsure.com/amazon/saa-c02-dumps.html
Amazon Web Services - SAA-C02
Question #:1
A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The
instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones On the first day of
every month at midnight the application becomes much slower when the month-end financial calculation batch
executes This causes the CPU utilization of the EC2 instances to immediately peak to 100%.which disrupts the
application
What should a solutions architect recommend to ensure the application is able to handle the workload and
avoid downtime?
A.  Configure an Amazon CloudFront distribution in front of the ALB
B.  Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization
C.  Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
D.  Configure Amazon ElastiCache to remove some of the workload from the EC2 instances
Answer: C
Question #:2
Organizers for a global event want to put daily reports online as static HTML pages The pages are expected to
generate millions of views from users around the world The files are stored in an Amazon S3 bucket A
solutions architect has been asked to design an efficient and effective solution
Which action should the solutions architect take to accomplish this?
A.  Generate presigned URLs for the files
B.  Use cross-Region replication to all Regions
C.  Use the geoproximity feature of Amazon Route 53
D.  Use Amazon CloudFront with the S3 bucket as its origin
Answer: D
Question #:3
A company has a legacy application that processes data in two parts The second part of the process takes
longer than the first, so the company has decided to rewrite the application as two microservices running on
Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?
A.  Implement code in microservice 1 to send data to an Amazon S3 bucket.Use S3 event notifications to
invoke microservice 2.
B.  Implement code in microservice 1 to publish data to an Amazon SNS topic Implement code in
microservice 2 to subscribe to this topic
Amazon Web Services - SAA-C02
C.  Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose.Implement code in
microservice 2 to read from Kinesis Data Firehose.
D.  Implement code in microservice 1 to send data to an Amazon SQS queue Implement code in
microservice 2 to process messages from the queue
Answer: A
Question #:4
A company serves content to its subscribers across the world using an application running on AWS The
application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB)
Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access for
certain countries
Which action will meet these requirements?
A.  Modify the ALB security group to deny incoming traffic from blocked countries
B.  Modify the security group for EC2 instances to deny incoming traffic from blocked countries
C.  Use Amazon CloudFront to serve the application and deny access to blocked countries
D.  Use ALB listener rules to return access denied responses to incoming traffic from blocked countries
Answer: C
Question #:5
A company runs a multi-tier web application that hosts news content The application runs on Amazon EC2
instances behind an Application Load Balancer.The instances run in an EC2 Auto Scaling group across
multiple Availability Zones and use an Amazon Aurora database.A solutions architect needs to make the
application more resilient to periodic increases in request rates
Which architecture should the solutions architect implement? (Select TWO )
A.  Add AWS Shield.
B.  Add Aurora Replicas
C.  Add AWS Direct Connect
D.  Add AWS Global Accelerator.
E.  Add an Amazon CloudFront distribution in front of the Application Load Balancer
Answer: A D
Question #:6
A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The
website has a mix of dynamic and static content Users around the globe are reporting that the website is slow
Which set of actions will improve website performance for users worldwide?
Amazon Web Services - SAA-C02
A.  Create an Amazon CloudFront distribution and configure the ALB as an origin Then update the Amazon
Route 53 record to point to the CloudFront distribution
B.  Create a latency-based Amazon Route 53 record for the ALB Then launch new EC2 instances with
larger instance sizes and register the instances with the ALB
C.  Launch nev.EC2 instances hosting the same web application in different Regions closer to the
users.Then register the instances with the same ALB using cross-Region VPC peering
D.  Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and
EC2 instances Then update an Amazon Route 53 record to point to the S3 buckets
Answer: B
Question #:7
A company's website is used to sell products to the public The site runs on Amazon EC2 instances in an Auto
Scaling group behind an Application Load Balancer (ALB) There is also an Amazon CloudFront distribution
and AWS WAF is being used to protect against SQL injection attacks The ALB is the origin for the
CloudFront distribution A recent review of security logs revealed an external malicious IP that needs to be
blocked from accessing the website
What should a solutions architect do to protect the application"?
A.  Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address
B.  Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address
C.  Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the
malicious IP address
D.  Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the
malicious IP address
Answer: D
Question #:8
A solutions architect has created a new AWS account and must secure AWSaccount root user access Which
combination of actions will accomplish this? (Select TWO.)
A.  Ensure the root user uses a strong password
B.  Enable multi-factor authentication to the root user
C.  Store root user access keys in an encrypted Amazon S3 bucket
D.  Add the root user to a group containing administrative permissions.
E.  Apply the required permissions to the root user with an inline policy document
Answer: B C
Amazon Web Services - SAA-C02
Explanation
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html
Question #:9
A company's production application runs online transaction processing (OLTP) transactions on an Amazon
RDS MySQL DB instance The company is launching a new reporting tool that will access the same data The
reporting tool must be highly available and not impact the performance of the production application
How can this be achieved'?
A.  Create hourly snapshots of the production RDS DB instance
B.  Create a Multi-AZ RDS Read Replica of the production RDS DB instance
C.  Create multiple RDS Read Replicas of the production RDS DB instance Place the Read Replicas in an
Auto Scaling group
D.  Create a Single-AZ RDS Read Replica of the production RDS DB instance Create a second Single-AZ
RDS Read Replica from the replica
Answer: B
Question #:10
A company built a food ordering application that captures user data and stores it for future analysis The
application's static front end is deployed on an Amazon EC2 instance The front-end application sends the
requests to the backend application running on separate EC2 instance The backend application then stores the
data in Amazon RDS
What should a solutions architect do to decouple the architecture and make it scalable''
A.  Use Amazon S3 to serve the front-end application which sends requests to Amazon EC2 to execute the
backend application The backend application will process and store the data in Amazon RDS
B.  Use Amazon S3 to serve the front-end application and write requests to an Amazon Simple Notification
Service (Amazon SNS) topic Subscribe Amazon EC2 instances to the HTTP/HTTPS endpoint of the
topic and process and store the data in Amazon RDS
C.  Use an EC2 instance to serve the front end and write requests to an Amazon SQS queue Place the
backend instance in an Auto Scaling group and scale based on the queue depth to process and store the
data in Amazon RDS
D.  Use Amazon S3 to serve the static front-end application and send requests to Amazon API Gateway
which writes the requests to an Amazon SQS queue Place the backend instances in an Auto Scaling
group and scale based on the queue depth to process and store the data in Amazon RDS
Answer: B
https://www.dumpsforsure.com/amazon/saa-c02-dumps.html