SAA-C02 (Page 28)

A company has a web server running on an Amazon EC2 instance in a public subnet with an Elastic IP address.The default security group is assigned to the EC2 instance.The default network ACL has been modified to block all traffic.A solutions architect needs to make the web server accessible from everywhere on port443.Which combination of steps will accomplish this task? (Choose two.)Read More →

A company must re-evaluate its need for the Amazon EC2 instances it currently has provisioned in an Auto Scaling group.At present, the Auto Scaling group is configured for a minimum of two instances and a maximum of four instances across two Availability Zones.A Solutions architect reviewed Amazon CloudWatch metrics and found that CPU utilization is consistently low for all the EC2 instances.What should the solutions architect recommend to maximize utilization while ensuring the application remains fault tolerant?Read More →

An ecommerce company is creating an application that requires a connection to a third-party payment service to process payments.The payment service needs to explicitly allow the public IP address of the server that is making the payment request.However, the company’s security policies do not allow any server to be exposed directly to the public internet.Which solution will meet these requirements?Read More →

A company is creating a prototype of an ecommerce website on AWS.The website consists of an Application Load Balancer, an Auto Scaling group of AmazonEC2 instances for web servers, and an Amazon RDS for MySQL DB instance that runs with the Single-AZ configuration.The website is slow to respond during searches of the product catalog.The product catalog is a group of tables in the MySQL database that the company does not update frequently.A solutions architect has determined that the CPU utilization on the DB instance is high when product catalog searches occur.What should the solutions architect recommend to improve the performance of the website during searches of the product catalog?Read More →

A company currently has 250 TB of backup files stored in Amazon S3 in a vendor’s proprietary format.Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3.The company wants to minimize the data transfer charges associated with this conversation.What should a solutions architect do to accomplish this?Read More →

A company is designing a cloud communications platform that is driven by APIs.The application is hosted on Amazon EC2 instances behind a Network LoadBalancer (NLB).The company uses Amazon API Gateway to provide external users with access to the application through APIs.The company wants to protect the platform against web exploits like SQL injection and also wants to detect and mitigate large, sophisticated DDoS attacks.Which combination of solutions provides the MOST protection? (Choose two.)Read More →

A company is designing an application to run in a VPC on AWS.The application consists of Amazon EC2 instances that run in private subnets as part of an AutoScaling group.The application also includes a Network Load Balancer that extends across public subnets.The application stores data in an Amazon RDS DB instance.The company has attached a security group that is named `web-servers` to the EC2 instances.The company has attached a security group that is named`database` to the DB instance.How should a solutions architect configure the communication between the EC2 instances and the DB instance?Read More →

A startup company is hosting a website for its customers on an Amazon EC2 instance.The website consists of a stateless Python application and a MySQL database.The website servers only a small amount of traffic.The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture.The company cannot modify the application code.Which combination of actions should a solutions architect take to achieve high availability for the website?Read More →

An application runs on an Amazon EC2 instance in a VPC.The application processes logs that are stored in an Amazon S3 bucket.The EC2 instance needs to access the S3 bucket without connectivity to the internet.Which solution will provide private network connectivity to Amazon S3?Read More →

A company has a business-critical application that runs on Amazon EC2 instances.The application stores data in an Amazon DynamoDB table.The company must be able to revert the table to any point within the last 24 hours.Which solution meets these requirements with the LEAST operational overhead?Read More →