SAA-C02 (Page 2)

A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region.A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks.Which solution will meet these requirements with the LEAST amount of administrative effort?Read More →

To meet security requirements, a company needs to encrypt all of its application data in transit while communicating with an Amazon RDS MySQL DB instance.A recent security audit revealed that encryption at rest is enabled using AWS Key Management Service (AWS KMS), but data in transit is not enabled.What should a solutions architect do to satisfy the security requirements?Read More →

A company is expanding a secure, on-premises network to AWS. The on-premises network has no direct internet access. The company is setting up am AWSDirect Connect connection between the on-premises network and AWS. An application that runs in the on-premises network needs to use the AWS software development kits (SDKs).A solutions architect must design a solution that supports this connectivity. However, the solution cannot incur additional cost beyond the cost of the DirectConnect connection.Which solution will meet these requirements?Read More →

A survey company has gathered data for several years from areas in the United States.The company hosts the data in an Amazon S3 bucket that is 3 TB in size and growing.The company has started to share the data with a European marketing firm that has S3 buckets.The company wants to ensure that its data transfer costs remain as low as possible.Which solution will meet these requirements?Read More →

A company develops applications in separate AWS accounts that are all part of an organization in AWS Organizations.An operations team creates an IAM user for each developer for a given application.As the company has grown, the number of applications has increased.Developers now work on several applications and need to view and access all their project accounts.A solutions architect must design a solution that minimizes the operational overhead for the operations team.What should the solutions architect do to meet these requirements?Read More →

A company has deployed a business-critical application in the AWS Cloud.The application uses Amazon EC2 instances that run in the us-east-1 Region.The application uses Amazon S3 for storage of all critical data.To meet compliance requirements, the company must create a disaster recovery (DR) plan that provides the capability of a full failover to another AWS Region.What should a solutions architect recommend for this DR plan?Read More →

A photo-sharing company makes a personalized collage of each user’s photographs available online.The company’s custom software builds each collage by using 10-20 available images for each user.The application stores the original images and the collages in Amazon S3 Standard storage.After a collage is created, the original files are needed only if the company must recreate the collage.The company has thousands of users and wants to reduce storage costs as much as possible.A solutions architect must recommend which S3 storage classes the company should use to store the original images and the collages.What should the solutions architect recommend to meet these requirements?Read More →

A company is expecting rapid growth in the near future.A solutions architect needs to configure existing users and grant permissions to new users on AWS.The solutions architect has decided to create IAM groups.The solutions architect will add the new users to IAM groups based on department.Which additional action is the MOST secure way to grant permissions to the new users?Read More →

A company has hired an external vendor to perform work in the company’s AWS account.The vendor uses an automated tool that is hosted in an AWS account that the vendor owns.The vendor does not have IAM access to the company’s AWS account.How should a solutions architect grant this access to the vendor?Read More →

A company runs a photo processing application that needs to frequently upload and download pictures from Amazon S3 buckets that are located in the sameAWS Region.A solutions architect has noticed an increased cost in data transfer fees and needs to implement a solution to reduce these costs.How can the solutions architect meet this requirement?Read More →