SAA-C02 (Page 49)

A website runs a web application that receives a burst of traffic each day at noon.The users upload new pictures and content daily, but have been complaining of timeouts.The architecture uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minute to initiate upon boot up before responding to user requests.How should a solutions architect redesign the architecture to better respond to changing traffic?Read More →

A company is concerned that two NAT instances in use will no longer be able to support the traffic needed for the company’s application.A solutions architect wants to implement a solution that is highly available fault tolerant, and automatically scalable.What should the solutions architect recommend?Read More →

A company operates a website on Amazon EC2 Linux instances.Some of the instances are failing.Troubleshooting points to insufficient swap space on the failed instances.The operations team lead needs a solution to monitor this.What should a solutions architect recommend?Read More →

A company has a web server running on an Amazon EC2 instance in a public subnet with an Elastic IP address.The default security group is assigned to the EC2 instance.The default network ACL has been modified to block all traffic.A solutions architect needs to make the web server accessible from everywhere on port443.Which combination of steps will accomplish this task? (Choose two.)Read More →

A company must re-evaluate its need for the Amazon EC2 instances it currently has provisioned in an Auto Scaling group.At present, the Auto Scaling group is configured for a minimum of two instances and a maximum of four instances across two Availability Zones.A Solutions architect reviewed Amazon CloudWatch metrics and found that CPU utilization is consistently low for all the EC2 instances.What should the solutions architect recommend to maximize utilization while ensuring the application remains fault tolerant?Read More →

An ecommerce company is creating an application that requires a connection to a third-party payment service to process payments.The payment service needs to explicitly allow the public IP address of the server that is making the payment request.However, the company’s security policies do not allow any server to be exposed directly to the public internet.Which solution will meet these requirements?Read More →

A company is creating a prototype of an ecommerce website on AWS.The website consists of an Application Load Balancer, an Auto Scaling group of AmazonEC2 instances for web servers, and an Amazon RDS for MySQL DB instance that runs with the Single-AZ configuration.The website is slow to respond during searches of the product catalog.The product catalog is a group of tables in the MySQL database that the company does not update frequently.A solutions architect has determined that the CPU utilization on the DB instance is high when product catalog searches occur.What should the solutions architect recommend to improve the performance of the website during searches of the product catalog?Read More →

A company currently has 250 TB of backup files stored in Amazon S3 in a vendor’s proprietary format.Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3.The company wants to minimize the data transfer charges associated with this conversation.What should a solutions architect do to accomplish this?Read More →

A company is designing a cloud communications platform that is driven by APIs.The application is hosted on Amazon EC2 instances behind a Network LoadBalancer (NLB).The company uses Amazon API Gateway to provide external users with access to the application through APIs.The company wants to protect the platform against web exploits like SQL injection and also wants to detect and mitigate large, sophisticated DDoS attacks.Which combination of solutions provides the MOST protection? (Choose two.)Read More →

A company is designing an application to run in a VPC on AWS.The application consists of Amazon EC2 instances that run in private subnets as part of an AutoScaling group.The application also includes a Network Load Balancer that extends across public subnets.The application stores data in an Amazon RDS DB instance.The company has attached a security group that is named `web-servers` to the EC2 instances.The company has attached a security group that is named`database` to the DB instance.How should a solutions architect configure the communication between the EC2 instances and the DB instance?Read More →