[Jul 26, 2023] Today Updated AWS-Solutions-Architect-Associate Exam Dumps Actual Questions
AWS-Solutions-Architect-Associate exam dumps with real Amazon questions and answers
The AWS Certified Solutions Architect - Associate (SAA-C02) certification is recognized as one of the most valuable certifications in the cloud computing industry. It is designed to validate the candidate’s skills in designing and deploying scalable, highly available, and fault-tolerant systems on AWS. AWS Certified Solutions Architect - Associate (SAA-C02) certification is ideal for IT professionals who are interested in pursuing a career in cloud computing, as it demonstrates their expertise in one of the most popular cloud platforms in the world.
NEW QUESTION # 180
A company is building software on AWS that requires access to various AWS services.
Which configuration should be used to ensure that AWS credentials (i.e., Access Key ID/secret access key combination) are not compromised?
- A. Assign an IAM user to the Amazon EC2 instance
- B. Store the AWS Access key ID/secret Access Key combination in software comments
- C. Assign an IAM role to the Amazon EC2 instance
- D. Enable Multi-factor Authentication for your AWS root account
Answer: C
NEW QUESTION # 181
A company has gigabytes of web log files stored in an Amazon S3. A Solutions Architect wants to copy those files into Amazon Redshift for analysis. The company's security policy mandates that data is encrypted at rest both in the Amazon Redshift cluster and the Amazon S3 bucket.
Which process will fulfill the security requirements?
- A. Enable server-side encryption on the Amazon S3 bucket. Copy data from the Amazon S3 bucket into an unencrypted Redshift cluster. Enable encryption on the cluster
- B. Launch an encrypted Amazon Redshift cluster. Copy the data from the Amazon S3 bucket into the Amazon Redshift cluster. Copy data back to the Amazon S3 bucket in encrypted form
- C. Enable server-side encryption on the Amazon S3 bucket. Launch an unencrypted Amazon Redshift cluster. Copy the data into the Amazon Redshift cluster
- D. Enable server-side encryption on the Amazon S3 bucket. Launch an encrypted Amazon Redshift cluster.
Copy the data into the Amazon Redshift cluster.
Answer: B
NEW QUESTION # 182
Can I move a Reserved Instance from one Region to another?
- A. Only if they are moving into GovCloud
- B. Yes
- C. Only if they are moving to US East from another region
- D. No
Answer: D
NEW QUESTION # 183
In regards to IAM you can edit user properties later, but you cannot use the console to change the ___________.
- A. user name
- B. default group
- C. password
Answer: A
NEW QUESTION # 184
A newspaper organization has a on-premises application which allows the public to search its back catalogue and retrieve individual newspaper pages via a website written in Java They have scanned the old newspapers into JPEGs (approx 17TB) and used Optical Character Recognition (OCR) to populate a commercial search product. The hosting platform and software are now end of life and the organization wants to migrate Its archive to AWS and produce a cost efficient architecture and still be designed for availability and durability Which is the most appropriate?
- A. Model the environment using CloudFormation use an EC2 instance running Apache webserver and an open source search application, stripe multiple standard EBS volumes together to store the JPEGs and search index.
- B. Use S3 with reduced redundancy lo store and serve the scanned files, install the commercial search application on EC2 Instances and configure with auto-scaling and an Elastic Load Balancer.
- C. Use S3 with standard redundancy to store and serve the scanned files, use CloudSearch for query processing, and use Elastic Beanstalk to host the website across multiple availability zones.
- D. Use a CloudFront download distribution to serve the JPEGs to the end users and Install the current commercial search product, along with a Java Container Tor the website on EC2 instances and use Route53 with DNS round-robin.
- E. Use a single-AZ RDS MySQL instance lo store the search index 33d the JPEG images use an EC2 instance to serve the website and translate user queries into SQL.
Answer: C
NEW QUESTION # 185
A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer The application stores data in Amazon Aurora. The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy What should a solutions architect do to meet these requirements?
- A. Replicate the primary infrastructure in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora database that is restored from the latest snapshot
- B. Back up data with AWS Backup Use the backup to create the required infrastructure in a second AWS Region Use Amazon Route 53 to configure active-passive failover Create an Aurora second primary instance in the second Region
- C. Deploy the application with the required infrastructure elements in place Use Amazon Route 53 to configure active-passive failover Create an Aurora Replica in a second AWS Region
- D. Host a scaled-down deployment of the application in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora Replica in the second Region
Answer: A
NEW QUESTION # 186
Your team has a tomcat-based Java application you need to deploy into development, test and production environments. After some research, you opt to use Elastic Beanstalk due to its tight integration with your developer tools and RDS due to its ease of management. Your QA team lead points out that you need to roll a sanitized set of production data into your environment on a nightly basis. Similarly, other software teams in your org want access to that same restored data via their EC2 instances in your VPC.
The optimal setup for persistence and security that meets the above requirements would be the following.
- A. Create your RDS instance separately and pass its DNS name to your app's DB connection string as an environment variable. Create a security group for client machines and add it as a valid source for DB traffic to the security group of the RDS instance itself.
- B. Create your RDS instance as part of your Elastic Beanstalk definition and alter its security group to allow access to it from hosts in your application subnets.
- C. Create your RDS instance separately and add its IP address to your application's DB connection strings in your code Alter its security group to allow access to it from hosts within your VPC's IP address block.
- D. Create your RDS instance separately and pass its DNS name to your's DB connection string as an environment variable Alter its security group to allow access to It from hosts in your application subnets.
Answer: B
NEW QUESTION # 187
True or False: Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 188
A company has a web application hosted over 10 Amazon CC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application.
The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error What should a solutions architect implement to overcome these timeout errors?
- A. Create a Route 53 simple touting policy record lot each EC2 instance Associate a hearth check with each record
- B. Create an Amazon CloudFront distribution with EC? instances as its origin Associate a health check with the EC? instances
- C. Create a Route 53 failover routing policy record for each EC2 instance Associate a health check with each record
- D. Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances Route to the ALB from Route 53
Answer: A
NEW QUESTION # 189
How can a user track memory usage in an EC2 instance?
- A. Use an instance type that supports memory usage reporting to a metric by default
- B. Assign an 1AM role to the EC2 instance with an 1AM policy granting access to the desired metric.
- C. Call Amazon CloudWatch to retrieve the memory usage metric data that exists for the EC2 Instance
- D. Place en agent on the EC2 instance to push memory usage to an Amazon CloudWatch custom metric.
Answer: D
NEW QUESTION # 190
A user is aware that a huge download is occurring on his instance. He has already set the Auto Scaling policy to increase the instance count when the network I/O increases beyond a certain limit. How can the user ensure that this temporary event does not result in scaling?
- A. Suspend scaling
- B. The policy cannot be set on the network I/O
- C. There is no way the user can stop scaling as it is already configured
- D. The network I/O are not affected during data download
Answer: A
Explanation:
The user may want to stop the automated scaling processes on the Auto Scaling groups either to perform manual operations or during emergency situations. To perform this, the user can suspend one or more scaling processes at any time. Once it is completed, the user can resume all the suspended processes.
Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/AS_Concepts.html
NEW QUESTION # 191
A company runs an application on a group of Amazon Linux EC2 instances. The application writes log files using standard API calls. For compliance reasons, all log files must be retained indefinitely and will be analyzed by a reporting tool that must access all files concurrently.
Which storage service should a solutions architect use to provide the MOST cost-effective solution?
- A. Amazon EBS
- B. Amazon EFS
- C. Amazon EC2 instance store
- D. Amazon S3
Answer: D
Explanation:
Amazon S3
Requests to Amazon S3 can be authenticated or anonymous. Authenticated access requires credentials that AWS can use to authenticate your requests. When making REST API calls directly from your code, you create a signature using valid credentials and include the signature in your request. Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance. This means customers of all sizes and industries can use it to store and protect any amount of data for a range of use cases, such as websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics. Amazon S3 provides easy-to-use management features so you can organize your data and configure finely-tuned access controls to meet your specific business, organizational, and compliance requirements. Amazon S3 is designed for 99.999999999% (11 9's) of durability, and stores data for millions of applications for companies all around the world.
Reference: https://aws.amazon.com/s3/
NEW QUESTION # 192
A solutions Architect is designing a multicontainer-based web application. Parts of the web application,
/orders and /sale-event, must scale independently while maintaining a single fully qualified domain name.
Which AWS services will help the Architect build this platform? (select TWO)
- A. Amazon SQS
- B. AmazonEC2 Container Service
- C. Amazon Dyanamo DB
- D. Amazon ELB Application Load balancer
- E. Amazon ELB classic load balancer
Answer: B,D
NEW QUESTION # 193
A company needs to use AWS resources to expand capacity for a website hosted in an on- premises data center. The AWS resources will include load balancers, Auto Scaling, and Amazon EC2 instances that will access an on-premises database. Network connectivity has been established, but no traffic is going to the AWS environment.
How should Amazon Route 53 be configured to distribute load to the AWS environment? (Select TWO.)
- A. Create multiple A records for the EC2 instances.
- B. Set up a weighted routing policy, distributing the workload between the load balancer and the on- premises environment.
- C. Set up an A record to point the DNS name to the IP address of the load balancer.
- D. Set up a routing policy for failover using the on-premises environment as primary and the load balancer as secondary.
- E. Set up a geolocation routing policy to distribute the workload between the load balancer and the on- premises environment.
Answer: B,C
NEW QUESTION # 194
A company's cloud operations team wants to standardize resource remediation. The company wants to provide a standard set of governance evaluations and remediation's to all member accounts in its organization in AWS Organizations.
Which self-managed AWS service can the company use to meet these requirements with the LEAST amount of operational effort?
- A. AWS CloudTrail
- B. AWS Security Hub compliance standards
- C. AWS Config conformance packs
- D. AWS Trusted Advisor
Answer: B
NEW QUESTION # 195
A company is developing a real-time multiplier game that uses UDP for communications between client and servers in an Auto Scaling group Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly. Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention.
Which solution should a solution architect recommend?
- A. Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage.
- B. Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage
- C. Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on-demand for data storage.
- D. Use a Network Load Balancer for traffic distribution and amazon Aura Global for data storage.
Answer: C
NEW QUESTION # 196
......
Exam Sure Pass Amazon Certification with AWS-Solutions-Architect-Associate exam questions: https://www.dumpstillvalid.com/AWS-Solutions-Architect-Associate-prep4sure-review.html
AWS-Solutions-Architect-Associate Exam in First Attempt Guaranteed: https://drive.google.com/open?id=1YCDi9KuEVY-V3786TKtiNGo6avxXb1gD
