Latest Amazon SAA-C02 Actual Free Exam Questions & Community Discussion, Page 3

Question #23

A solutions architect must migrate a Windows Internet Information Services (IIS) web application to AWS The application currently relies on a file share hosted in the user's on-premises network-attached storage (NAS) The solutions architect has proposed migrating the MS web servers to Amazon EC2 instances in multiple Availability Zones that are connected to the storage solution, and configuring an Elastic Load Balancer attached to the instances
Which replacement to the on-premises file share is MOST resilient and durable?

A. Migrate the file share to Amazon Elastic File System (Amazon EFS)

B. Migrate the file share to AWS Storage Gateway

C. Migrate the file share to Amazon FSx for Windows File Server

D. Migrate the file share to Amazon RDS

Discussion 0

Correct Answer: C Vote an answer

Question #24

A solutions architect is creating a new VPC design. There are two public subnets for the load balancer, two private subnets for web servers, and two private subnets for MySQL. The web servers use only HTTPS. The solutions architect has already created a security group for the load balancer allowing port 443 from 0.0.0.0/0.
Company policy requires that each resource has the least access required to still be able to perform its tasks.
Which additional configuration strategy should the solutions architect use to meet these requirements?

A. Create a security group for the web servers and allow port 443 from 0.0.0.0/0. Create a security group (or the MySQL servers and allow port 3306 from the web servers security group.

B. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.

C. Create a network ACL for the web servers and allow port 443 from the load balancer. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.

D. Create a security group for the web servers and allow port 443 from the load balancer. Create a security group for the MySQL servers and allow port 3306 from the web servers security group.

Discussion 0

Correct Answer: D Vote an answer

Question #25

A company wants to replicate its data to AWS to recover in the event of a disaster Today a system administrator has scripts that copy data to a NFS share Individual backup files need to be accessed with low latency by application administrators to deal with errors in processing
What should a solutions architect recommend to meet these requirements?

A. Modify the script to copy data to an Amazon Elastic File System (Amazon EFS) volume instead of the on-premises NFS share

B. Modify the script to copy data to an Amazon S3 bucket instead of the on-premises NFS share

C. Modify the script to copy data to an Amazon S3 Glacier Archive instead of the on-premises NFS share

D. Modify the script to copy data to an AWS Storage Gateway for File Gateway virtual appliance instead of the on-premises NFS share

Discussion 0

Correct Answer: A Vote an answer

Question #26

A company recently announced the deployment of its retail website to a global audience. The website runs on multiple Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.
The company wants to provide its customers with different versions of content based on the devices that the customers use to access the website.
Which combination of actions should a solutions architect take to meet these requirements7 (Select TWO.)

A. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up path-based routing to different EC2 instances.

B. Configure a Lambda@Edge function to send specific objects to users based on the User-Agent header.

C. Configure Amazon CloudFront to cache multiple versions of the content.

D. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up host-based routing to different EC2 instances.

E. Configure a host header in a Network Load Balancer to forward traffic to different instances.

Discussion 0

Correct Answer: D,E Vote an answer

Question #27

A company recently launched a new service that involves medical images The company scans the images and sends them from its on-premises data center through an AWS Direct Connect connection to Amazon EC2 instances After processing is complete, the images are stored in an Amazon S3 bucket
A company requirement states that the EC2 instances cannot be accessible through the internet The EC2 instances run in a private subnet, which has a default route back to the on-premises data center for outbound internet access
Usage of the new service is increasing rapidly A solutions architect must recommend a solution that meets the company's requirements and reduces the Direct Connect charges.
Which solution accomplishes these goals MOST cost-effectively?

A. Move the EC2 instances into a public subnet Configure the public subnet route table to point to an internet gateway

B. Configure a VPC endpoint for Amazon S3 Add an entry to the private subnet's route table for the S3 endpoint

C. Configure a NAT gateway in a public subnet Configure the private subnet's route table to use the NAT gateway

D. Configure Amazon S3 as a file system mount point on the EC2 instances Access Amazon S3 through the mount

Discussion 0

Correct Answer: C Vote an answer

Question #28

A company has a web application that includes an embedded NoSQL database The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone.
A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent
Which solution will meet these requirements with the LEAST operational overhead*?

A. Modify the Auto Scaling group to use EC2 instances across three Availability Zones Maintain the embedded NoSQL database with its replication service on the EC2 instances.

B. Replace the ALB with a Network Load Balancer Maintain the embedded NoSQL database with its replication service on the EC2 instances

C. Replace the ALB with a Network Load Balancer Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).

D. Modify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS)

Discussion 0

Correct Answer: C Vote an answer

Question #29

A customer is running an application on Amazon EC2 instances hosted in a private subnet of a VPC. The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB). The EC2 instances use a NAT gateway outbound internet access However, the EC2 instances are not able to connect to the public internet to download software updates.

A. The EC2 instances are not associated with an Elastic IP address.

B. The ELB is not configured with a proper health check.

C. The route tables in the VPC are configured incorrectly.

D. The outbound rules on the security group attachment to the EC2 instances are configured incorrectly.

E. The security group attached to the NAT gateway is configured incorrectly.

Discussion 0

Correct Answer: C,D Vote an answer

Question #30

A company has a serverless website with millions of objects in an Amazon S3 bucket The company uses tie S3 bucket as the origin tor an Amazon CloudFront distribution The company did not set encryption on the S3 bucket before the objects were loaded A solutions architect needs to enable encryption for all existing objects and for all objects that are added to the S3 bucket in the future
Which solution will meet these requirements with the LEAST amount of effort?

A. Create a new encryption key by using AWS Key Management Service (AWS KMS) Change the settings on the S3 bucket to use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) Turn on versioning for the S3 bucket

B. Navigate to Amazon S3 in the AWS Management Console Browse the S3 bucket's objects Sort by the encryption field Select each unencrypted object Use the Modify button to apply default encryption settings to every unencrypted object in the S3 bucket

C. Create a new S3 bucket Turn on the default encryption settings for the new S3 bucket Download all existing objects to temporary local storage Upload the objects to the new S3 bucket

D. Turn on the default encryption settings for the S3 bucket Use the S3 Inventory feature to create a csv file that lists the unencrypted objects Run an S3 Batch Operations job that uses the copy command to encrypt those objects

Discussion 0

Correct Answer: A Vote an answer

Question #31

A solutions architect is designing the storage architecture tor a new web application used for storing and viewing engineering drawings All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load The application must be able to store petabytes of data.
Which combination of storage and caching should the solutions architect use?

A. Amazon S3 with Amazon CloudFront

B. Amazon S3 Glacier with Amazon ElastiCache

C. AWS Storage Gateway with Amazon ElastiCache

D. Amazon Elastic Block Store (Amazon BBS) volumes with Amazon CloudFront

Discussion 0

Correct Answer: A Vote an answer

Question #32

A company has a three-tier web application that is deployed on AWS. The web servers are deployed in a public subnet in a VPC. The application servers and database servers are deployed in private subnets in the same VPC. The company has deployed a third-party virtual firewall appliance from AWS Marketplace in an inspection VPC. The appliance is configured with an IP interface that can accept IP packets.
A solutions architect needs to Integrate the web application with the appliance to inspect all traffic to the application before the traffic teaches the web server. Which solution will moot these requirements with the LEAST operational overhead?

A. Deploy a transit gateway m the inspection VPC Configure route tables to route the incoming pockets through the transit gateway

B. Create a Network Load Balancer the public subnet of the application's VPC to route the traffic lo the appliance for packet inspection

C. Deploy a Gateway Load Balancer in the inspection VPC Create a Gateway Load Balancer endpoint to receive the incoming packets and forward the packets to the appliance

D. Create an Application Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection

Discussion 0

Correct Answer: C Vote an answer

Question #33

A company has three VPCs named Development, Testing and Production in the us-east-1 Region. The three VPCs need to be connected to an on-premises data center and are designed to be separate to maintain security and prevent any resource sharing A solutions architect needs to find a scalable and secure solution
What should the solutions architect recommend?

A. Create VPC peers from all the VPCs to the Production VPC Use an AWS Direct Connect connection from the Production VPC back to the data center

B. Create an AWS Direct Connect connection and a VPN connection for each VPC to connect back to the data center.

C. Create a new VPC called Network Within the Network VPC create an AWS Transit Gateway with an AWS Direct Connect connection back to the data center Attach all the other VPCs to the Network VPC.

D. Connect VPN connections from all the VPCs to a VPN in the Production VPC. Use a VPN connection from the Production VPC back to the data center

Discussion 0

Correct Answer: C Vote an answer

Amazon SAA-C02 Actual Free Exam Questions & Community Discussion

Download Free Amazon SAA-C02 Demo