Amazon occupies the largest share of the cloud market, so needless to say, you also know its importance. Amazon certification came into being with the cloud market. Anyone who obtains Amazon cloud certification will become Amazon. Members of the family.
Want to easily pass the Amazon certification exam is not a simple thing. Work hard to learn the most basic, you also need a little hint to help you easily learn to pass the exam.
You can take the Amazon SAA-C02 online exam on this site Tests, practice tests help you verify your proficiency and improve your exam skills. But this is only part of the complete Amazon SAA-C02 exam questions.
Choose Advanced Amazon SAA-C02 dumps https://www.leads4pass.com/saa-c02.html (Total Questions: 883 Q&A). Help you successfully pass the first exam.
Awsexamdumps collects complete Amazon exam series questions and answers, you can learn more or share with friends in need.
Continue to learn to get the free Amazon SAA-C02 Exam PDF and take the online exam test
Amazon SAA-C02 Exam PDF
Google Drive: https://drive.google.com/file/d/19YES64hTjginYtQWDAa2Vkx9gXVPprSD/view?usp=sharing
Amazon SAA-C02 exam questions online test
The answer is announced at the end of the article
QUESTION 1
A company is running a multi-tier web application on premises. The web application is containerized and runs on a
number of Linux hosts connected to a PostgreSQL database that contains user records The operational overhead of
maintaining the infrastructure and capacity planning is limiting the company\\’s growth A solutions architect must
improve the application\\’s infrastructure.
Which combination of actions should the solutions architect take to accomplish this? (Select TWO.)
A. Migrate the PostgreSQL database to Amazon Aurora
B. Migrate the web application to be hosted on Amazon EC2 instances.
C. Set up an Amazon CloudFront distribution for the web application content.
D. Set up Amazon ElastiCache between the web application and the PostgreSQL database
E. Migrate the web application to be hosted on AWS Fargate with Amazon Elastic Container Service (Amazon ECS)
QUESTION 2
A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same
AWS account. Which solution will meet these requirement in the MOST secure manner?
A. Apply an S3 bucket pokey that grants road access to the S3 bucket
B. Apply an IAM role to the Lambda function Apply an 1AM policy to the role to grant read access to the S3 bucket
C. Embed an access key and a secret key In the Lambda function\\’s coda to grant the required 1AM permissions for
read access to the S3 bucket
D. Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to all S3 buckets In
the account
QUESTION 3
A solutions architect is designing a mission-critical web application. It will consist of Amazon EC2
instances behind an Application Load Balancer and a relational database. The database should be highly
available and fault tolerant.
Which database implementations will meet these requirements? (Select TWO.)
A. Amazon Redshift
B. Amazon DynamoDB
C. Amazon RDS for MySQL
D. MySQL-compatible Amazon Aurora Multi-AZ
E. Amazon RDS for SQL Server Standard Edition Mufti-AZ
QUESTION 4
A company hosts a popular website in the AWS Cloud, A solutions architect needs to provide reports about user click
behaviour in near-real time as users navigate the website.
Which solution will meet this requirement
A. Store the clickstream data in Amazon DynamoDB. Deploy an application that runs on AWS Elastic Beanstalk to
process and analyze the data.
B. Push the clickstream data from each session to an Amazon Kinesis data stream Analyze the dab by using Amazon
Kinesis Data Analytics.
C. Store the clickstream data in an Amazon S3 bucket. Order the data by timestamp Process the data with an AWS
Lambda function that is subscribed to object creation events on the S3 bucket.
D. Forward the clickstream data to Amazon Simple Queue Service (Amazon SOS) Store the data In an Amazon ROS
for MySQL DB instance. Deploy Amazon FC2 Instances to process and analyze the data
QUESTION 5
A company is building a web-based application running on Amazon EC2 instances in multiple Availability Zones. The
web application will provide access to a repository of text documents totaling about 900 TB in size. The company
anticipates that the web application will experience periods of high demand. A solutions architect must ensure that the
storage component for the text documents can scale to meet the demand of the application at all times. The company is concerned about the overall cost of the solution.
Which storage solution meets these requirements MOST cost-effectively?
A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elasticsearch Service (Amazon ES)
D. Amazon S3
QUESTION 6
A company has an application that servers clients that are deployed in more than 20,000 retail storefront locations
around the world. The application consists of backend web services that are exposed over HTTPS on port 443. The
application is hosted on Amazon EC2 instance behind an Application Load balancer (ALB). The retail locations
communicate with the web applications over the public internet. The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP. The company\\’s security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations. What should a solutions architect do to meet these requirements?
A. Associate an AWS WAF web ACL with the ALB. Use IP rule sets on the ALB to filter traffic. Update the IP addresses
in the rule to include the registered IP addresses.
B. Deploy AWS Firewall Manager to manage the ALB. Configure firewall rules to restrict traffic to the ALB. Modify the
firewall rules to include the registered IP addresses.
C. Store the IP addresses in an Amazon DynamicDB table. Configure an AWS Lambda authorization function on the
ALB to validate that incoming requests are from the registered IP addresses.
D. Configure the network ACL on the subnet that contains the public interface of the ALB. Update the ingress rules on
the network ACL with entries for each of the registered IP addresses.
QUESTION 7
A development team is deploying a new product on AWS and Is using AWS Lambda as part of the deployment. The
team allocates 512 MB of memory for one of the Lambda functions. With this memory allocation, the function is
completed in 2 minutes. The function runs millions of times monthly, and the development team is concerned about cost The team conducts tests to see how different Lambda memory allocations affect the cost of the function. Which steps will reduce the Lambda costs for the product? {Select TWO.)
A. Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of
each function to be less than 1 minute
B. Increase the memory allocation for this Lambda function to 1.024 MB If this change causes the execution time of
each function to be less than 90 seconds.
C. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each
function to be less than 4 minutes.
D. Increase the memory allocation for this Lambda function to 2,048 MB If this change causes the execution time of
each function to be less than 1 minute.
E. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each
function to be less than 5 minutes.
QUESTION 8
An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon
DynamoDB table. What is the MOST secure way to access the table while ensuring that the traffic does not leave the
AWS network?
A. Use a VPC endpoint for DynamoDB.
B. Use a NAT gateway in a public subnet.
C. Use a NAT instance in a private subnet.
D. Use the internet gateway attached to the VPC.
QUESTION 9
A company needs to ingest and handle large amounts of streaming data that its application generates. The application
runs on Amazon EC2 instances and sends data to Amazon Kinesis Data Streams, which is configured with default
settings. Every other day, the application consumes the data and writes the data to an Amazon S3 bucket for business
intelligence (BI) processing. The company observes that Amazon S3 is not receiving all the data that the application
sends to Kinesis Data Streams.
What should a solutions architect do to resolve this issue?
A. Update the Kinesis Data Streams default settings by modifying the data retention period.
B. Update the application to use the Kinesis Producer Library (KPL) to send the data to Kinesis Data Streams.
C. Update the number of Kinesis shards to handle the throughput of the data that is sent to Kinesis Data Streams.
D. Turn on S3 Versioning within the S3 bucket to preserve every version of every object that is ingested in the S3
bucket.
Reference: https://aws.amazon.com/kinesis/data-firehose/faqs/
QUESTION 10
A company receives data (rem different sources and implements multiple applications to consume this data There are
many short-running jobs that run only on the weekend The data arrives in batches rather than throughout the entire
weekend. The company needs an environment on AWS to ingest and process this data while maintaining the order of
the transactions. Which combination of AWS services meets these requirements in the MOST cost-effective manner?
A. Amazon Kinesis Data Streams with AWS Lambda
B. Amazon Kinesis Data Streams with Amazon EC2 Auto Scaling
C. Amazon Simple Queue Service (Amazon SQS) with AWS Lambda
D. Amazon Simple Queue Service (Amazon SQS) with Amazon EC2 Auto Scaling
QUESTION 11
A company has an application that uses overnight digital images of products on store shelves to analyze inventory data.
The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and obtains the images
from an Amazon S3 bucket for its metadata to be processed by worker nodes for analysis. A solutions architect needs
to ensure that every image is processed by the worker nodes.
What should the solutions architect do to meet this requirement in the MOST cost-efficient way?
A. Send the image metadata from the application directly to a second ALB for the worker nodes that use an Auto
Scaling group of EC2 Spot Instances as the target group.
B. Process the image metadata by sending it directly to EC2 Reserved Instances in an Auto Scaling group. With a
dynamic scaling policy, use an Amazon CloudWatch metric for average CPU utilization of the Auto Scaling group as
soon as the front-end application obtains the images.
C. Write messages to Amazon Simple Queue Service (Amazon SQS) when the front-end application obtains an image.
Process the images with EC2 On-Demand instances in an Auto Scaling group with instance scale-in protection and a
fixed number of instances with periodic health checks.
D. Write messages to Amazon Simple Queue Service (Amazon SQS) when the application obtains an image. Process
the images with EC2 Spot Instances in an Auto Scaling group with instance scale-in protection and a dynamic scaling
policy using a custom Amazon CloudWatch metric for the current number of messages in the queue.
QUESTION 12
A company is building a document storage application on AWS. The Application runs on Amazon EC2
instances in multiple Availability Zones. The company requires the document store to be highly available.
The documents need to be returned immediately when requested. The lead engineer has configured the
application to use Amazon Elastic Block Store (Amazon EBS) to store the documents, but is willing to
consider other options to meet the availability requirement.
What should a solution architect recommend?
A. Snapshot the EBS volumes regularly and build new volumes using those snapshots in additional Availability Zones.
B. Use Amazon EBS for the EC2 instance root volumes. Configure the application to build the document store on
Amazon S3.
C. Use Amazon EBS for the EC2 instance root volumes. Configure the application to build the document store on
Amazon S3 Glacier.
D. Use at least three Provisioned IOPS EBS volumes for EC2 instances. Mount the volumes to the EC2 instances in
RAID 5 configuration.
QUESTION 13
A company has hired an external vendor to perform work in the company\\’s AWS account The vendor uses an
automated tool that is hosted in an AWS account that the vendor owns The vendor does not have 1AM access to the
company\\’s AWS account
How should a solutions architect grant this access to the vendor?
A. Create an lAM rote in the company\\’s account to delegate access to the vendor\\’s 1AM role Attach the appropriate
1AM policies to the role for the permissions that the vendor requires
B. Create an lAM user in the company\\’s account with a password that meets the password complexity requirements
Attach the appropriate lAM policies to the user (or the permissions that the vendor requires
C. Create an IAM group in the company\\’s account Add the tool\\’s lAM user from the vendor account lo the group
Attach the appropriate lAM policies to the group for the permissions that the vendor requires
D. Create a new identity provider by choosing “AWS account” as the provider type in the 1AM console Supply the
vendor\\’s AWS account ID and user name Attach the appropriate 1AM policies to the new provider for the permissions that the vendor requires
Publish the answer
| Q1 | Q2 | Q3 | Q4 | Q5 | Q6 | Q7 | Q8 | Q9 | Q10 | Q11 | Q12 | Q13 |
| CD | B | DE | B | D | C | AE | A | C | A | B | B | B |
Advanced Amazon SAA-C02 dumps: https://www.leads4pass.com/saa-c02.html (Total Questions: 883 Q&A)
Amazon SAA-C02 Exam PDF
Google Drive: https://drive.google.com/file/d/19YES64hTjginYtQWDAa2Vkx9gXVPprSD/view?usp=sharing
Participate in Awsexamdumps free exam questions to verify your true strength. Now you know your true strength. Are you ready to take the Amazon SAA-C02 exam to get certified? Choose Advanced Amazon SAA-C02 Dumps
Help you easily pass into the Amazon family.