Exams > Amazon > AWS Certified Solutions Architect - Associate SAA-C02
AWS Certified Solutions Architect - Associate SAA-C02
Page 38 out of 83 pages Questions 371-380 out of 822 questions
Question#371

A company is storing sensitive user information in an Amazon S3 bucket. The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC.
Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

  • A. Configure a VPC gateway endpoint for Amazon S3 within the VPC.
  • B. Create a bucket policy to make the objects in the S3 bucket public.
  • C. Create a bucket policy that limits access to only the application tier running in the VPC.
  • D. Create an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance.
  • E. Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket.
Discover Answer Hide Answer

AC

Question#372

A solutions architect plans to convert a company's monolithic web application into a multi-tier application. The company wants to avoid managing its own infrastructure. The minimum requirements for the web application are high availability, scalability, and regional low latency during peak hours. The solution should also store and retrieve data with millisecond latency using the application's API.
Which solution meets these requirements?

  • A. Use AWS Fargate to host the web application with backend Amazon RDS Multi-AZ DB instances.
  • B. Use Amazon API Gateway with an edge-optimized API endpoint, AWS Lambda for compute, and Amazon DynamoDB as the data store.
  • C. Use an Amazon Route 53 routing policy with geolocation that points to an Amazon S3 bucket with static website hosting and Amazon DynamoDB as the data store.
  • D. Use an Amazon CloudFront distribution that points to an Elastic Load Balancer with an Amazon EC2 Auto Scaling group, along with Amazon RDS Multi-AZ DB instances.
Discover Answer Hide Answer

A

Question#373

A team has an application that detects new objects being uploaded into an Amazon S3 bucket. The uploads trigger AWS Lambda function to write object metadata into an Amazon DynamoDB table and an Amazon RDS for PostgreSQL database.
Which action should the team take to ensure high availability?

  • A. Enable Cross-Region Replication in the S3 bucket.
  • B. Create a Lambda function for each Availability Zone the application is deployed in.
  • C. Enable Multi-AZ on the RDS for PostgreSQL database.
  • D. Create a DynamoDB stream for the DynamoDB table.
Discover Answer Hide Answer

C

Question#374

A company is planning to migrate a legacy application to AWS. The application currently uses NFS to communicate to an on-premises storage solution to store application data. The application cannot be modified to use any other communication protocols other than NFS for this purpose.
Which storage solution should a solutions architect recommend for use after the migration?

  • A. AWS DataSync
  • B. Amazon Elastic Block Store (Amazon EBS)
  • C. Amazon Elastic File System (Amazon EFS)
  • D. Amazon EMR File System (Amazon EMRFS)
Discover Answer Hide Answer

C

Question#375

An application calls a service run by a vendor. The vendor charges based on the number of calls. The finance department needs to know the number of calls that are made to the service to validate the billing statements.
How can a solutions architect design a system to durably store the number of calls without requiring changes to the application?

  • A. Call the service through an internet gateway.
  • B. Decouple the application from the service with an Amazon Simple Queue Service (Amazon SQS) queue.
  • C. Publish a custom Amazon CloudWatch metric that counts calls to the service.
  • D. Call the service through a VPC peering connection.
Discover Answer Hide Answer

C
There are 2 main types of monitoring you can do on AWS EC2 Instances as follows:
Basic Monitoring for Amazon EC2 instances: Seven pre-selected metrics at five-minute frequency and three status check metrics at one-minute frequency, for no additional charge.
Detailed Monitoring for Amazon EC2 instances: All metrics available to Basic Monitoring at one-minute frequency, for an additional charge. Instances with Detailed
Monitoring enabled allows data aggregation by Amazon EC2 AMI ID and instance type.
Reference:
https://datanextsolutions.com/blog/how-to-collect-custom-metrics-from-aws-ec2-instances/

Question#376

A company wants to reduce its Amazon S3 storage costs in its production environment without impacting durability or performance of the stored objects.
What is the FIRST step the company should take to meet these objectives?

  • A. Enable Amazon Macie on the business-critical S3 buckets to classify the sensitivity of the objects.
  • B. Enable S3 analytics to identify S3 buckets that are candidates for transitioning to S3 Standard-Infrequent Access (S3 Standard-IA).
  • C. Enable versioning on all business-critical S3 buckets.
  • D. Migrate the objects in all S3 buckets to S3 Intelligent-Tiering.
Discover Answer Hide Answer

D

Question#377

A company is building a web-based application running on Amazon EC2 instances in multiple Availability Zones. The web application will provide access to a repository of text documents totaling about 900 TB in size. The company anticipates that the web application will experience periods of high demand. A solutions architect must ensure that the storage component for the text documents can scale to meet the demand of the application at all times. The company is concerned about the overall cost of the solution.
Which storage solution meets these requirements MOST cost-effectively?

  • A. Amazon Elastic Block Store (Amazon EBS)
  • B. Amazon Elastic File System (Amazon EFS)
  • C. Amazon Elasticsearch Service (Amazon ES)
  • D. Amazon S3
Discover Answer Hide Answer

C
Reference:
https://www.missioncloud.com/blog/resource-amazon-ebs-vs-efs-vs-s3-picking-the-best-aws-storage-option-for-your-business

Question#378

A company hosts multiple production applications. One of the applications consists of resources from Amazon EC2, AWS Lambda, Amazon RDS, Amazon Simple
Notification Service (Amazon SNS), and Amazon Simple Queue Service (Amazon SQS) across multiple AWS Regions. All company resources are tagged with a tag name of `application` and a value that corresponds to each application. A solutions architect must provide the quickest solution for identifying all of the tagged components.
Which solution meets these requirements?

  • A. Use AWS CloudTrail to generate a list of resources with the application tag.
  • B. Use the AWS CLI to query each service across all Regions to report the tagged components.
  • C. Run a query in Amazon CloudWatch Logs Insights to report on the components with the application tag.
  • D. Run a query with the AWS Resource Groups Tag Editor to report on the resources globally with the application tag.
Discover Answer Hide Answer

D

Question#379

A development team is deploying a new product on AWS and is using AWS Lambda as part of the deployment. The team allocates 512 MB of memory for one of the Lambda functions. With this memory allocation, the function is completed in 2 minutes. The function runs millions of times monthly, and the development team is concerned about cost. The team conducts tests to see how different Lambda memory allocations affect the cost of the function.
Which steps will reduce the Lambda costs for the product? (Choose two.)

  • A. Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of each function to be less than 1 minute.
  • B. Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of each function to be less than 90 seconds.
  • C. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 4 minutes.
  • D. Increase the memory allocation for this Lambda function to 2,048 MB if this change causes the execution time of each function to be less than 1 minute.
  • E. Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 5 minutes.
Discover Answer Hide Answer

AE

Question#380

A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon
EC2 instance in a public subnet of a VPC. A solutions architect needs to connect from the on-premises network, through the company's internet connection, to the bastion host, and to the application servers. The solutions architect must make sure that the security groups of all the EC2 instances will allow that access.
Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

  • A. Replace the current security group of the bastion host with one that only allows inbound access from the application instances.
  • B. Replace the current security group of the bastion host with one that only allows inbound access from the internal IP range for the company.
  • C. Replace the current security group of the bastion host with one that only allows inbound access from the external IP range for the company.
  • D. Replace the current security group of the application instances with one that allows inbound SSH access from only the private IP address of the bastion host.
  • E. Replace the current security group of the application instances with one that allows inbound SSH access from only the public IP address of the bastion host.
Discover Answer Hide Answer

AC

chevron rightPrevious Nextchevron right