SAA-C02 (Page 62)

A solutions architect is creating an application.The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC.The EC2 instances will frequently access large files that contain confidential information.These files are stored in Amazon S3 buckets for processing.The solutions architect must optimize the network architecture to minimize data transfer costs.What should the solutions architect do to meet these requirements?Read More →

A company has several Amazon EC2 instances set up in a private subnet for security reasons.These instances host applications that read and write large amounts of data to and from Amazon S3 regularly.Currently, subnet routing directs all the traffic destined for the internet through a NAT gateway.The company wants to optimize the overall cost without impacting the ability of the application to communicate with Amazon S3 or the outside internet.What should a solutions architect do to optimize costs?Read More →

A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database.The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster.The company wants to allow the instances to authenticate to the database in a secure way.The company does not want to maintain static database credentials.Which solution meets these requirements with the LEAST operational effort?Read More →

A company’s web application consists of multiple Amazon EC2 instances that run behind an Application Load Balancer in a VPC.An Amazon RDS for MySQL DB instance contains the data.The company needs the ability to automatically detect and respond to suspicious or unexpected behavior in its AWS environment.The company already has added AWS WAF to its architecture.What should a solutions architect do next to protect against threats?Read More →

A solutions architect is designing a two-tiered architecture that has separate private subnets for compute resources and the database.An AWS Lambda function that is deployed in the compute subnets needs connectivity to the database.Which solution will provide this connectivity in the MOST secure way?Read More →

A solutions architect is designing a workload that will store hourly energy consumption by business tenants in a building.The sensors will feed a database throughHTTP requests that will add up usage for each tenant.The solutions architect must use managed services when possible.The workload will receive more features in the future as the solutions architect adds independent components.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is selling up an application to use an Amazon RDS MySQL DB instance.The database must be architected for high availability across AvailabilityZones and AWS Regions with minimal downtime.How should a solutions architect meet this requirement?Read More →

A company needs guaranteed Amazon EC2 capacity in three specific Availability Zones in a specific AWS Region for an upcoming event that will last 1 week.What should the company do to guarantee the EC2 capacity?Read More →

A company’s HTTP application is behind a Network Load Balancer (NLB).The NLB’s target group is configured to use an Amazon EC2 Auto Scaling group with multiple EC2 instances that run the web service.The company notices that the NLB is not detecting HTTP errors for the application.These errors require a manual restart of the EC2 instances that run the web service.The company needs to improve the application’s availability without writing custom scripts or code.What should a solutions architect do to meet these requirements?Read More →

A company is working with an external vendor that requires write access to the company’s Amazon Simple Queue Service (Amazon SQS) queue.The vendor has its own AWS account.What should a solutions architect do to implement least privilege access?Read More →