SAA-C02 (Page 43)

A company is using a centralized AWS account to store log data in various Amazon S3 buckets.A solutions architect needs to ensure that the data is encrypted at rest before the data is uploaded to the S3 buckets.The data also must be encrypted in transit.Which solution meets these requirements?Read More →

A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DB instance.Management wants to eliminate single points of failure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code.Which solution meets these requirements?Read More →

An application running on an Amazon EC2 instance needs to access an Amazon DynamoDB table.Both the EC2 instance and the DynamoDB table are in the same AWS account.A solutions architect must configure the necessary permissions.Which solution will allow least privilege access to the DynamoDB table from the EC2 instance?Read More →

A company has a hybrid application hosted on multiple on-premises servers with static IP addresses.There is already a VPN that provides connectivity between the VPC and the on-premises network.The company wants to distribute TCP traffic across the on-premises servers for internet users.What should a solutions architect recommend to provide a highly available and scalable solution?Read More →

A company hosts a website on premises and wants to migrate it to the AWS Cloud.The website exposes a single hostname to the internet but it routes its functions to different on-premises server groups based on the path of the URL.The server groups are scaled independently depending on the needs of the functions they support.The company has an AWS Direct Connect connection configured to its on-premises network.What should a solutions architect do to provide path-based routing to send the traffic to the correct group of servers?Read More →

An application uses an Amazon RDS MySQL DB instance.The RDS database is becoming low on disk space.A solutions architect wants to increase the disk space without downtime.Which solution meets these requirements with the LEAST amount of effort?Read More →

A solutions architect is designing a VPC with public and private subnets.The VPC and subnets use IPv4 CIDR blocks.There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability.An internet gateway is used to provide internet access for the public subnets.The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.What should the solutions architect do to enable internet access for the private subnets?Read More →

A company has an on-premises MySQL database used by the global sales team with infrequent access patterns.The sales team requires the database to have minimal downtime.A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future.Which service should a solutions architect recommend?Read More →

A company runs an application that receives data from thousands of geographically dispersed remote devices that use UDP.The application processes the data immediately and sends a message back to the device if necessary.No data is stored.The company needs a solution that minimizes latency for the data transmission from the devices.The solution also must provide rapid failover to another AWSRegion.Which solution will meet these requirements?Read More →

A solutions architect at a company is designing the architecture for a two-tiered web application.The web application is composed of an internet-facing ApplicationLoad Balancer (ALB) that forwards traffic to an Auto Scaling group of Amazon EC2 instances.The EC2 instances must be able to access a database that runs onAmazon RDS.The company has requested a defense-in-depth approach to the network layout.The company does not want to rely solely on security groups or network ACLs.Only the minimum resources that are necessary should be routable from the internet.Which network design should the solutions architect recommend to meet these requirements?Read More →