Exams > Amazon > AWS Certified Solutions Architect - Associate SAA-C02
AWS Certified Solutions Architect - Associate SAA-C02
Page 41 out of 83 pages Questions 401-410 out of 822 questions
Question#401

A company is migrating its applications to AWS. Currently, applications that run on premises generate hundreds of terabytes of data that is stored on a shared file system. The company is running an analytics application in the cloud that runs hourly to generate insights from this data.
The company needs a solution to handle the ongoing data transfer between the on-premises shared file system and Amazon S3. The solution also must be able to handle occasional interruptions in internet connectivity.
Which solutions should the company use for the data transfer to meet these requirements?

  • A. AWS DataSync
  • B. AWS Migration Hub
  • C. AWS Snowball Edge Storage Optimized
  • D. AWS Transfer for SFTP
Discover Answer Hide Answer

A
Reference:
https://aws.amazon.com/cloud-data-migration/

Question#402

A solutions architect is designing the architecture for a new web application. The application will run on AWS Fargate containers with an Application Load
Balancer (ALB) and an Amazon Aurora PostgreSQL database. The web application will perform primarily read queries against the database.
What should the solutions architect do to ensure that the website can scale with increasing traffic? (Choose two.)

  • A. Enable auto scaling on the ALB to scale the load balancer horizontally.
  • B. Configure Aurora Auto Scaling to adjust the number of Aurora Replicas in the Aurora cluster dynamically.
  • C. Enable cross-zone load balancing on the ALB to distribute the load evenly across containers in all Availability Zones.
  • D. Configure an Amazon Elastic Container Service (Amazon ECS) cluster in each Availability Zone to distribute the load across multiple Availability Zones.
  • E. Configure Amazon Elastic Container Service (Amazon ECS) Service Auto Scaling with a target tracking scaling policy that is based on CPU utilization.
Discover Answer Hide Answer

BE

Question#403

A company captures ordered clickstream data from multiple websites and uses batch processing to analyze the data. The company receives 100 million event records, all approximately 1 KB in size, each day. The company loads the data into Amazon Redshift each night, and business analysts consume the data.
The company wants to move toward near-real-time data processing for timely insights. The solution should process the streaming data while requiring the least possible operational overhead.
Which combination of AWS services will meet these requirements MOST cost-effectively? (Choose two.)

  • A. Amazon EC2
  • B. AWS Batch
  • C. Amazon Simple Queue Service (Amazon SQS)
  • D. Amazon Kinesis Data Firehose
  • E. Amazon Kinesis Data Analytics
Discover Answer Hide Answer

CE

Question#404

A company has a customer relationship management (CRM) application that stores data in an Amazon RDS DB instance that runs Microsoft SQL Server. The company's IT staff has administrative access to the database. The database contains sensitive data. The company wants to ensure that the data is not accessible to the IT staff and that only authorized personnel can view the data.
What should a solutions architect do to secure the data?

  • A. Use client-side encryption with an Amazon RDS managed key.
  • B. Use client-side encryption with an AWS Key Management Service (AWS KMS) customer managed key.
  • C. Use Amazon RDS encryption with an AWS Key Management Service (AWS KMS) default encryption key.
  • D. Use Amazon RDS encryption with an AWS Key Management Service (AWS KMS) customer managed key.
Discover Answer Hide Answer

C

Question#405

A company with a single AWS account runs its internet-facing containerized web application on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.
The EKS cluster is placed in a private subnet of a VPC. System administrators access the EKS cluster through a bastion host on a public subnet.
A new corporate security policy requires the company to avoid the use of bastion hosts. The company also must not allow internet connectivity to the EKS cluster.
Which solution meets these requirements MOST cost-effectively?

  • A. Set up an AWS Direct Connect connection.
  • B. Create a transit gateway.
  • C. Establish a VPN connection.
  • D. Use AWS Storage Gateway.
Discover Answer Hide Answer

B

Question#406

A company has deployed a multiplayer game for mobile devices. The game requires live location tracking of players based on latitude and longitude. The data store for the game must support rapid updates and retrieval of locations.
The game uses an Amazon RDS for PostgreSQL DB instance with read replicas to store the location data. During peak usage periods, the database is unable to maintain the performance that is needed for reading and writing updates. The game's user base is increasing rapidly.
What should a solutions architect do to improve the performance of the data tier?

  • A. Take a snapshot of the existing DB instance. Restore the snapshot with Multi-AZ enabled.
  • B. Migrate from Amazon RDS to Amazon Elasticsearch Service (Amazon ES) with Kibana.
  • C. Deploy Amazon DynamoDB Accelerator (DAX) in front of the existing DB instance. Modify the game to use DAX.
  • D. Deploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis.
Discover Answer Hide Answer

C

Question#407

A company is migrating a large, mission-critical database to AWS. A solutions architect has decided to use an Amazon RDS for MySQL Multi-AZ DB instance that is deployed with 80,000 Provisioned IOPS for storage. The solutions architect is using AWS Database Migration Service (AWS DMS) to perform the data migration. The migration is taking longer than expected, and the company wants to speed up the process. The company's network team has ruled out bandwidth as a limiting factor.
Which actions should the solutions architect take to speed up the migration? (Choose two.)

  • A. Disable Multi-AZ on the target DB instance.
  • B. Create a new DMS instance that has a larger instance size.
  • C. Turn off logging on the target DB instance until the initial load is complete.
  • D. Restart the DMS task on a new DMS instance with transfer acceleration enabled.
  • E. Change the storage type on the target DB instance to Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp2).
Discover Answer Hide Answer

CD

Question#408

A company wants to run its critical applications in containers to meet requirements for scalability and availability. The company prefers to focus on maintenance of the critical applications. The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workload.
What should a solutions architect do to meet these requirements?

  • A. Use Amazon EC2 instances, and install Docker on the instances.
  • B. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes.
  • C. Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
  • D. Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-optimized Amazon Machine Image (AMI).
Discover Answer Hide Answer

C
Reference:
https://aws.amazon.com/fargate/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc&fargate-blogs.sort- by=item.additionalFields.createdDate&fargate-blogs.sort-order=desc

Question#409

A company is designing a new application that runs in a VPC on Amazon EC2 instances. The application stores data in Amazon S3 and uses Amazon DynamoDB as its database. For compliance reasons, the company prohibits all traffic between the EC2 instances and other AWS services from passing over the public internet.
What can a solutions architect do to meet this requirement?

  • A. Configure gateway VPC endpoints to Amazon S3 and DynamoDB.
  • B. Configure interface VPC endpoints to Amazon S3 and DynamoDB.
  • C. Configure a gateway VPC endpoint to Amazon S3. Configure an interface VPC endpoint to DynamoDB.
  • D. Configure a gateway VPC endpoint to DynamoDB. Configure an interface VPC endpoint to Amazon S3.
Discover Answer Hide Answer

C

Question#410

A company's security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently.
What should a solutions architect do to meet these requirements when configuring the logs?

  • A. Use Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days.
  • B. Use Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.
  • C. Use AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.
  • D. Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard-IA) after 90 days.
Discover Answer Hide Answer

D

chevron rightPrevious Nextchevron right