SAA-C02 (Page 45)

To meet security requirements, a company needs to encrypt all of its application data in transit while communicating with an Amazon RDS MySQL DB instance.A recent security audit revealed that encryption at rest is enabled using AWS Key Management Service (AWS KMS), but data in transit is not enabled.What should a solutions architect do to satisfy the security requirements?Read More →

A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region.A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks.Which solution will meet these requirements with the LEAST amount of administrative effort?Read More →

A company runs a static website through its on-premises data center.The company has multiple servers that handle all of its traffic, but on busy days, services are interrupted and the website becomes unavailable.The company wants to expand its presence globally and plans to triple its website traffic.What should a solutions architect recommend to meet these requirements?Read More →

A company wants to share forensic accounting data that is stored in an Amazon RDS DB instance with an external auditor.The auditor has its own AWS account and requires its own copy of the database.How should the company securely share the database with the auditor?Read More →

An application that is hosted on Amazon EC2 instances needs to access an Amazon S3 bucket.Traffic must not traverse the internet.How should a solutions architect configure access to meet these requirements?Read More →

A company wants to use AWS Systems Manager to manage a fleet of Amazon EC2 instances.According to the company’s security requirements, no EC2 instances can have internet access.A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation.Which solution will meet these requirements?Read More →

A company provides an online service for posting video content and transcoding it for use by any mobile platform.The application architecture uses AmazonElastic File System (Amazon EFS) Standard to collect and store the videos so that multiple Amazon EC2 Linux instances can access the video content for processing.As the popularity of the service has grown over time, the storage costs have become too expensive.Which storage solution is MOST cost-effective?Read More →

An administrator of a large company wants to monitor for and prevent any cryptocurrency-related attacks on the company’s AWS accounts.Which AWS service can the administrator use to protect the company against attacks?Read More →

A company is running a multi-tier web application on premises.The web application is containerized and runs on a number of Linux hosts connected to aPostgreSQL database that contains user records.The operational overhead of maintaining the infrastructure and capacity planning is limiting the company’s growth.A solutions architect must improve the application’s infrastructure.Which combination of actions should the solutions architect take to accomplish this? (Choose two.)Read More →

A company wants to move its on-premises network attached storage (NAS) to AWS.The company wants to make the data available to any Linux instances within its VPC and ensure changes are automatically synchronized across all instances accessing the data store.The majority of the data is accessed very rarely, and some files are accessed by multiple users at the same time.Which solution meets these requirements and is MOST cost-effective?Read More →