SAA-C02 (Page 57)

A solutions architect launches an Amazon EC2 instance inside a new VPC.The solutions architect configures network ACL rules and security group rules that allow the appropriate traffic to flow to and from the instance.An Elastic IP address is associated with the instance.The solutions architect needs to be able to access the instance from the internet.Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)Read More →

A company is creating a new web application for its subscribers.The application will consist of a static single page and a persistent database layer.The application will have millions of users for 4 hours in the morning, but the application will have only a few thousand users during the rest of the day.The company’s data architects have requested the ability to rapidly evolve their schema.Which solutions will meet these requirements and provide the MOST scalability? (Choose two.)Read More →

A solutions architect is migrating a document management workload to AWS.The workload keeps 7 TiB of contract documents on a shared storage file system and tracks them on an external database.Most of the documents are stored and retrieved eventually for reference in the future.The application cannot be modified during the migration, and the storage solution must be highly available.Documents are retrieved and stored by web servers that run on Amazon EC2 instances in an Auto Scaling group.The Auto Scaling group can have up to 12 instances.Which solution meets these requirements MOST cost-effectively?Read More →

A new employee has joined a company as a deployment engineer.The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources.A solutions architect wants the deployment engineer to perform job activities while following the principle of least privilege.Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)Read More →

A company has an image processing workload running on Amazon Elastic Container Service (Amazon ECS) in two private subnets.Each private subnet uses aNAT instance for internet access.All images are stored in Amazon S3 buckets.The company is concerned about the data transfer costs between Amazon ECS and Amazon S3.What should a solutions architect do to reduce costs?Read More →

A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file.The configuration file is stored as plaintext on the root device volume of the team’s Amazon EC2 instance.When the team’s application needs to reach the database, it reads the file and loads the credentials into the code.The team has modified the permissions of the configuration file so that only the application can read its content.A solutions architect must design a more secure solution.What should the solutions architect do to meet this requirement?Read More →

A company is running a multi-tier ecommerce web application in the AWS Cloud.The application runs on Amazon EC2 Instances with an Amazon RDS MySQLMulti-AZ DB instance.Amazon RDS is configured with the latest generation instance with 2,000 GB of storage in an Amazon Elastic Block Store (Amazon EBS)General Purpose SSD (gp2) volume.The database performance impacts the application during periods of high demand.After analyzing the logs in Amazon CloudWatch Logs, a database administrator finds that the application performance always degrades when the number of read and write IOPS is higher than 6.000.What should a solutions architect do to improve the application performance?Read More →

A solutions architect needs to design a highly available application consisting of web, application, and database tiers.HTTPS content delivery should be as close to the edge as possible, with the least delivery time.Which solution meets these requirements and is MOST secure?Read More →

A company has more than 5 TB of file data on Windows file servers that run on premises.Users and applications interact with the data each day.The company is moving its Windows workloads to AWS.As the company continues this process, the company requires access to AWS and on-premises file storage with minimum latency.The company needs a solution that minimizes operational overhead and requires no significant changes to the existing file access patterns.The company uses an AWS Site-to-Site VPN connection for connectivity to AWS.What should a solutions architect do to meet these requirements?Read More →

A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account.The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3.The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard.The solution must not affect the speed of EC2 instance launches.How should the company move the data to Amazon S3 to meet these requirements?Read More →