Amazon AWS-Solution-Architect-Associate Amazon AWS Certified Solutions Architect - Associate (SAA-C02) Exam Exam Practice Test Questions

• Question 1

  A company has a service that produces event data. The company wants to use AWS to process the event data as it is received. The data is written in a specific order that must be maintained throughout processing The company wants to implement a solution that minimizes operational overhead.How should a solutions architect accomplish this?

  • Create an Amazon Simple Queue Service (Amazon SQS) FIFO queue to hold messages Set up an AWS Lambda function to process messages from the queue
  • Create an Amazon Simple Notification Service (Amazon SNS) topic to deliver notifications containing payloads to process Configure an AWS Lambda function as a subscriber.
  • Create an Amazon Simple Queue Service (Amazon SQS) standard queue to hold messages. Set up an AWS Lambda function to process messages from the queue independently
  • Create an Amazon Simple Notification Service (Amazon SNS) topic to deliver notifications containing payloads to process. Configure an Amazon Simple Queue Service (Amazon SQS) queue as a subscriber.

  Show Answer Answer: A Next

• Question 2

  A company hosts an application on AWS. The application interacts with an Amazon DynamoDB table that has 10 read capacity units (RCUs) Data from Amazon CloudWatch alarms shows that throttling is occurring on read requests to the DynamoDB table. The company needs to prevent this issue from happening in the future as the application continues to grow.What should a solutions architect recommend to meet these requirements?

  • Add an Elastic Load Balancer in front of the DynamoDB table.
  • Change the RCUs for the DynamoDB table to 20.
  • Provision 20 write capacity units (WCUs) for the DynamoDB table to offset the throttling on read requests.
  • Enable auto scaling for the DynamoDB table

  Show Answer Answer: D Next

• Question 3

  A company wants to deploy a new public web application on AWS The application includes a web server tier that uses Amazon EC2 instances The application also includes a database tier that uses an Amazon RDS for MySQL DB instanceThe application must be secure and accessible for global customers that have dynamic IP addressesHow should a solutions architect configure the security groups to meet these requirements'?

  • Configure the security group tor the web servers lo allow inbound traffic on port 443 from 0.0.0. 0/0) Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers
  • Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers Configure the security group for the DB instance lo allow inbound traffic on port 3306 from the security group of the web servers
  • Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers
  • Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0.0 Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0)

  Show Answer Answer: A Next

• Question 4

  A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis An application on an Amazon EC2 instance needs permission to efficiently process the CSV data stored in the S3 bucket.

  • Attach a resource-based policy lo the S3 bucket
  • Create an IAM user for the application with specific permissions to the S3 bucket
  • Associate an IAM role with least privilege permissions lo the EC2 instance profile D Store AWS a credential directly on the EC2 instance for applications on the instance to use for API calls

  Show Answer Answer: C Next

• Question 5

  A company currently operates a web application backed by an Amazon RDS MySQL database It has automated backups that are run daily and are not encrypted A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed The company will make at least one encrypted backup before destroying the old backups.What should be done to enable encryption for future backups?

  • Enable default encryption for the Amazon S3 bucket where backups are stored
  • Modify the backup section of the database configuration to toggle the Enable encryption check box
  • Create a snapshot of the database Copy it to an encrypted snapshot Restore the database from the encrypted snapshot
  • Enable an encrypted read replica on RDS for MySQL Promote the encrypted read replica to primary Remove the original database instance

  Show Answer Answer: C Next