Exams > Amazon > AWS Certified Solutions Architect - Associate SAA-C02
AWS Certified Solutions Architect - Associate SAA-C02
Page 5 out of 83 pages Questions 41-50 out of 822 questions
Question#41

A company running an on-premises application is migrating the application to AWS to increase its elasticity and availability. The current architecture uses a
Microsoft SQL Server database with heavy read activity. The company wants to explore alternate database options and migrate database engines, if needed.
Every 4 hours, the development team does a full copy of the production database to populate a test database. During this period, users experience latency.
What should a solutions architect recommend as replacement database?

  • A. Use Amazon Aurora with Multi-AZ Aurora Replicas and restore from mysqldump for the test database.
  • B. Use Amazon Aurora with Multi-AZ Aurora Replicas and restore snapshots from Amazon RDS for the test database.
  • C. Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas, and use the standby instance for the test database.
  • D. Use Amazon RDS for SQL Server with a Multi-AZ deployment and read replicas, and restore snapshots from RDS for the test database.
Discover Answer Hide Answer

D

Question#42

A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of its developer accounts. The company has created a central
AWS account for streamlining management and audit reviews. An internal auditor needs to access the CloudTrail logs, yet access needs to be restricted for all developer account users. The solution must be secure and optimized.
How should a solutions architect meet these requirements?

  • A. Configure an AWS Lambda function in each developer account to copy the log files to the central account. Create an IAM role in the central account for the auditor. Attach an IAM policy providing read-only permissions to the bucket.
  • B. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket.
  • C. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM role in the central account for the auditor. Attach an IAM policy providing read-only permissions to the bucket.
  • D. Configure an AWS Lambda function in the central account to copy the log files from the S3 bucket in each developer account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket.
Discover Answer Hide Answer

C

Question#43

A company has several business systems that require access to data stored in a file share. The business systems will access the file share using the Server
Message Block (SMB) protocol. The file share solution should be accessible from both of the company's legacy on-premises environments and with AWS.
Which services meet the business requirements? (Choose two.)

  • A. Amazon Elastic Block Store (Amazon EBS)
  • B. Amazon Elastic File System (Amazon EFS)
  • C. Amazon FSx for Windows
  • D. Amazon S3
  • E. AWS Storage Gateway file gateway
Discover Answer Hide Answer

CE

Question#44

A company is using Amazon EC2 to run its big data analytics workloads. These variable workloads run each night, and it is critical they finish by the start of business the following day. A solutions architect has been tasked with designing the MOST cost-effective solution.
Which solution will accomplish this?

  • A. Spot Fleet
  • B. Spot Instances
  • C. Reserved Instances
  • D. On-Demand Instances
Discover Answer Hide Answer

A

Question#45

A company has a Microsoft Windows-based application that must be migrated to AWS. This application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances.
What should a solutions architect do to accomplish this?

  • A. Configure a volume using Amazon Elastic File System (Amazon EFS). Mount the EFS volume to each Windows instance.
  • B. Configure AWS Storage Gateway in Volume Gateway mode. Mount the volume to each Windows instance.
  • C. Configure Amazon FSx for Windows File Server. Mount the Amazon FSx volume to each Windows instance.
  • D. Configure an Amazon Elastic Block Store (Amazon EBS) volume with the required size. Attach each EC2 instance to the volume. Mount the file system within the volume to each Windows instance.
Discover Answer Hide Answer

C

Question#46

A company has created an isolated backup of its environment in another Region. The application is running in warm standby mode and is fronted by an
Application Load Balancer (ALB). The current failover process is manual and requires updating a DNS alias record to point to the secondary ALB in another
Region.
What should a solutions architect do to automate the failover process?

  • A. Enable an ALB health check
  • B. Enable an Amazon Route 53 health check.
  • C. Crate an CNAME record on Amazon Route 53 pointing to the ALB endpoint.
  • D. Create conditional forwarding rules on Amazon Route 53 pointing to an internal BIND DNS server.
Discover Answer Hide Answer

C

Question#47

A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be read with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes.
Which method should the solutions architect select?

  • A. Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint.
  • B. Add DynamoDB read replicas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.
  • C. Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.
  • D. Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.
Discover Answer Hide Answer

A
Reference:
https://aws.amazon.com/blogs/aws/amazon-dynamodb-accelerator-dax-in-memory-caching-for-read-intensive-workloads/

Question#48

A company is creating an architecture for a mobile app that requires minimal latency for its users. The company's architecture consists of Amazon EC2 instances behind an Application Load Balancer running in an Auto Scaling group. The EC2 instances connect to Amazon RDS. Application beta testing showed there was a slowdown when reading the data. However, the metrics indicate that the EC2 instances do not cross any CPU utilization thresholds.
How can this issue be addressed?

  • A. Reduce the threshold for CPU utilization in the Auto Scaling group.
  • B. Replace the Application Load Balancer with a Network Load Balancer.
  • C. Add read replicas for the RDS instances and direct read traffic to the replica.
  • D. Add Multi-AZ support to the RDS instances and direct read traffic to the new EC2 instance.
Discover Answer Hide Answer

C

Question#49

A company has implemented one of its microservices on AWS Lambda that accesses an Amazon DynamoDB table named Books. A solutions architect is designing an IAM policy to be attached to the Lambda function's IAM role, giving it access to put, update, and delete items in the Books table. The IAM policy must prevent function from performing any other actions on the Books table or any other.
Which IAM policy would fulfill these needs and provide the LEAST privileged access?
A.

B.

C.

D.

Discover Answer Hide Answer

A

Question#50

A company hosts its website on Amazon S3. The website serves petabytes of outbound traffic monthly, which accounts for most of the company's AWS costs.
What should a solutions architect do to reduce costs?

  • A. Configure Amazon CloudFront with the existing website as the origin.
  • B. Move the website to Amazon EC2 with Amazon Elastic Block Store (Amazon EBS) volumes for storage.
  • C. Use AWS Global Accelerator and specify the existing website as the endpoint.
  • D. Rearchitect the website to run on a combination of Amazon API Gateway and AWS Lambda.
Discover Answer Hide Answer

A

chevron rightPrevious Nextchevron right