Latest SAA-C02 Dumps PDF With 100% Money Back Policy
                     Amazon
SAA-C02 Dumps
AWS Certified Associate
Verified By Experts
Get Prepared And Pass Your Exam.
Question: 1 
   
A solutions architect is creating a new VPC design. There are two public subnet for the load balancer, 
two private subnets for web servers, and two private subnets for MySQL. The web serves use only 
HTTPS. 
The solutions architect has already created a security group for the load Balancer allowing port 443 from 
0.0 0.0/0. Company policy requires that each resource has the least access required to still be able to 
perform its tasks. 
Which additional configuration strategy should the solution architect use to meet these requirements? 
 
A. Create a security group far the web servers and allow port 443 from 0.0.0.070. Create a security 
group tor the MySQL serve's aid allow port 3306 from the web servers security group. 
B. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL 
for the MySQL servers and allow port 3306 from the web servers security group 
C. Create a security group for the web servers and allow port 443 from the load balancer. Create a 
security group tor the MySQL servers and allow port 3306 from the web sewers security group 
D. Create a network ACL for the web servers and allow port 443 from the web balancer. Create a 
network ACL for the MySQL servers and allow port 3306 from the web servers security group. 
 
Answer: C     
 
Question: 2 
   
A company runs an application on an Amazon EC2 instance Backed by Amazon Elastic Block Store 
(Amazon EBS). The instance needs to be available for 12 hours daily. The company wants to save costs 
by making the instance unavailable outside the window required for the application However the 
contents of the instance's memory must be preserved whenever the instance is unavailable 
What should a solutions architect do lo meet this requirement? 
 
A. Stop the instance outside the application's availability window. Start up the Instance again when 
required. 
B. Hibernate tie instance outside the application's availability window. Start up the instance again when 
required. 
C. Use Auto Scaling to scale down the instance outside the application's availability window. Scale up the 
instance when required. 
D. Terminate the instance outside the application's availability window Launch the instance by using a 
preconfigured Amazon Machine Image (AMI) when required 
 
Answer: B     
 
Question: 3 
   
A company Is migrating lo the AWS Cloud. A file server is the first workload to migrate. Users must be 
able to access the file share using the Server Message Block (SMB) protocol. 
Which AWS managed service meets these requirements? 
 
A. Amazon EBS 
B. Amazon EC2 
C. Amazon FSx 
D. Amazon S3 
 
Answer: B     
 
Question: 4 
   
A solutions architect needs to design a resilient solution for Windows users' home directories. The 
solution must provide fault tolerance, file-level backup and recovery, and access control, based upon the 
company's Active Directory. 
Which storage solution meets these requirements? 
 
A. Configure Amazon S3 to store the users' home directories. Join Amazon S3 to Active Directory. 
B. Configure a Multi-AZ file system with Amazon FSx for Windows File Server Join Amazon FSx to Active 
Directory. 
C. Configure Amazon Elastic File System (Amazon EFS) for the users' home directories. Configure AWS 
Single Sign-On with Active Directory. 
D. Configure Amazon Elastic Block Store (Amazon EBS) to store the users' home directories Configure 
AWS Single Sign-On with Active Directory. 
 
Answer: C     
 
Question: 5 
   
A company has a legacy application that processes data in two parts. The second part of the process 
takes longer than the first, so the company has decided to rewrite the application as two microservices 
running on Amazon ECS that can scale independently 
How should a solutions architect integrate the microservices? 
 
A. Implement code in microservice 1 to send data to an Amazon S3 bucket. Use S3 event notifications to 
invoke microservice 2 
B. Implement code in microservice 1 to publish data to an Amazon SNS topic. Implement code In 
microservice 2 to subscribe to this topic. 
C. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose. Implement code in 
microservice 2 to read from Kinesis Data Firehose. 
D. Implement code in microservice 1 to send data to an Amazon SQS queue. Implement code in 
microservice 2 to process messages from the queue. 
 
Answer: D     
 
Question: 6 
   
A company is hosting a web application on AWS using a single Amazon EC2 instance that stores 
useruploaded documents in an Amazon EBS volume For better scalability and availability the company 
duplicated the architecture and created a second EC2 instance and EBS volume in another Availability 
Zone: placing both behind an Application Load Balancer After completing this change users reported 
that each time they refreshed the website they could see one subset of their documents or the other 
but never all of the documents at the same time 
What should a solutions architect propose to ensure users see all of their documents at once? 
 
A. Copy the data so both EBS volumes contain all the documents 
B. Configure the Application Load Balancer to direct a user to the server with the documents 
C. Copy the data from both EBS volumes to Amazon EFS Modify the application to save new documents 
to Amazon EFS 
D. Configure the Application Load Balancer to send the request to both servers Return each document 
from the correct server 
 
Answer: C     
 
Explanation: 
https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2 
Amazon EFS provides file storage in the AWS Cloud. With Amazon EFS, you can create a file system, 
mount the file system on an Amazon EC2 instance, and then read and write data to and from your file 
system. You can mount an Amazon EFS file system in your VPC, through the Network File System 
versions 
4.0 and 4.1 (NFSv4) protocol. We recommend using a current generation Linux NFSv4.1 client, such as 
those found in the latest Amazon Linux, Redhat, and Ubuntu AMIs, in conjunction with the Amazon EFS 
Mount Helper. For instructions, see Using the amazon-efs-utils Tools. 
For a list of Amazon EC2 Linux Amazon Machine Images (AMIs) that support this protocol, see NFS 
Support. For some AMIs, you'll need to install an NFS client to mount your file system on your Amazon 
EC2 instance. For instructions, see Installing the NFS Client. 
You can access your Amazon EFS file system concurrently from multiple NFS clients, so applications that 
scale beyond a single connection can access a file system. Amazon EC2 instances running in multiple 
Availability Zones within the same AWS Region can access the file system, so that many users can access 
and share a common data source. 
How Amazon EFS Works with Amazon EC2 
 
https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2 
 
Question: 7 
   
A web application runs on Amazon EC2 instances behind an Application Load Balancer The application 
allows users to create custom reports of historical weather data. Generating a report can take up to 5 
minutes. These long-running requests use many of the available incoming connections, making the 
system unresponsive to other users 
How can a solutions architect make the system more responsive? 
 
A. Use Amazon SOS with AWS Lambda to generate reports 
B. Increase the Idle timeout on the Application Load Balancer to 5 minutes. 
C. Update the client-side application code to increase its request timeout to 5 minutes. 
D. Publish the reports to Amazon S3 and use Amazon CloudFront for downloading lo the user. 
 
Answer: A     
 
Question: 8 
   
A company is planning to use Amazon S3 to store images uploaded by its users. The images must be 
encrypted at rest in Amazon S3. The company does not want to spend time managing and rotating the 
keys, but it does want to control who can access those keys. 
What should a solutions architect use to accomplish this? 
 
A. Server-Side Encryption with keys stored in an S3 bucket 
B. Server-Side Encryption with Customer-Provided Keys (SSE-C) 
C. Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3) 
D. Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS) 
 
Answer: D     
 
Question: 9 
   
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an 
Elastic Load Balancer Based on the application's history, the company anticipates a spike in traffic during 
a holiday each year. A solutions architect must design a strategy to ensure that the Auto Scaling group 
proactively increases capacity lo minimize any performance impact on application users. 
Which solution will meet these requirements? 
 
A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 
90%. 
B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of 
peak demand. 
C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the 
peak demand period. 
D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there 
ate autoscaling:EC2_INSTANCE_LAUNCH events. 
 
Answer: B     
 
Question: 10 
   
A website runs a web application that receives a burst of traffic each day at noon. The users upload new 
pictures and content daily, but have been complaining of timeouts. The architecture uses Amazon EC2 
Auto Seating groups, and the custom application consistently takes 1 minute to initiate upon boot up 
before responding to user requests 
How should a solutions architect redesign the architecture to better respond to changing traffic? 
 
A. Configure a Network Load Balancer with a slow start configuration. 
B. Configure AWS ElastiCache for Redis to offload direct requests to the servers 
C. Configure an Auto Scaling step scaling policy with an instance warmup condition. 
D. Configure Amazon CloudFront to use an Application Load Balancer as the origin. 
 
Answer: C