SAA-C02 (Page 36)

A company uses Amazon S3 to store its confidential audit documents.The S3 bucket uses bucket policies to restrict access to audit team IAM user credentials according to the principle of least privilege.Company managers are worried about accidental deletion of documents in the S3 bucket and want a more secure solution.What should a solutions architect do to secure the audit documents?Read More →

A company operates a two-tier application for image processing.The application uses two Availability Zones, each with one public subnet and one private subnet.An Application Load Balancer (ALB) for the web tier uses the public subnets.Amazon EC2 instances for the application tier use the private subnets.Users report that the application is running more slowly than expected.A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses.A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution.What should the solutions architect recommend to meet this requirement?Read More →

A company has two VPCs that are located in the us-west-2 Region within the same AWS account.The company needs to allow network traffic between theseVPCs.Approximately 500 GB of data transfer will occur between the VPCs each month.What is the MOST cost-effective solution to connect these VPCs?Read More →

A company is running a multi-tier web application on AWS.The application runs its database tier on Amazon Aurora MySQL.The application and database tiers are in the us-east-1 Region.A database administrator who regularly monitors the Aurora DB cluster finds that an intermittent increase in read traffic is creating high CPUutilization on the read replica and causing increased read latency of the application.What should a solutions architect do to improve read scalability?Read More →

A company has an ecommerce application running in a single VPC.The application stack has a single web server and an Amazon RDS Multi-AZ DB instance.The company launches new products twice a month.This increases website traffic by approximately 400% for a minimum of 72 hours.During product launches, users experience slow response times and frequent timeout errors in their browsers.What should a solutions architect do to mitigate the slow response times and timeout errors while minimizing operational overhead?Read More →

An ecommerce company is experiencing an increase in user traffic.The company’s store is deployed on Amazon EC2 instances as a two-tier two application consisting of a web tier and a separate database tier.As traffic increases, the company notices that the architecture is causing significant delays in sending timely marketing and order confirmation email to users.The company wants to reduce the time it spends resolving complex email delivery issues and minimize operational overhead.What should a solutions architect do to meet these requirements?Read More →

A company wants to monitor its AWS costs for financial review.The cloud operations team is designing an architecture in the AWS Organizations management account to query AWS Cost and Usage Reports for all member accounts.The team must run this query once a month and provide a detailed analysis of the bill.Which solution is the MOST scalable and cost-effective way to meet these requirements?Read More →

A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods for IAM user passwords.What should the solutions architect do to accomplish this?Read More →

A company is developing a serverless web application that gives users the ability to interact with real-time analytics from online games.The data from the games must be streamed in real life.The company needs a durable, low-latency database option for user data.The company does not know how many users will use the application.Any design considerations must provide response times of single-digit milliseconds as the application scales.Which combination of AWS services will meet these requirements? (Choose two.)Read More →

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture.The company plans to create many new AWS accounts for different business units.The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service.Which combination of actions should a solutions architect recommend to meet these requirements? (Choose two.)Read More →