SAA-C02 (Page 66)

A company is expecting rapid growth in the near future.A solutions architect needs to configure existing users and grant permissions to new users on AWS.The solutions architect has decided to create IAM groups.The solutions architect will add the new users to IAM groups based on department.Which additional action is the MOST secure way to grant permissions to the new users?Read More →

A photo-sharing company makes a personalized collage of each user’s photographs available online.The company’s custom software builds each collage by using 10-20 available images for each user.The application stores the original images and the collages in Amazon S3 Standard storage.After a collage is created, the original files are needed only if the company must recreate the collage.The company has thousands of users and wants to reduce storage costs as much as possible.A solutions architect must recommend which S3 storage classes the company should use to store the original images and the collages.What should the solutions architect recommend to meet these requirements?Read More →

A company has deployed a business-critical application in the AWS Cloud.The application uses Amazon EC2 instances that run in the us-east-1 Region.The application uses Amazon S3 for storage of all critical data.To meet compliance requirements, the company must create a disaster recovery (DR) plan that provides the capability of a full failover to another AWS Region.What should a solutions architect recommend for this DR plan?Read More →

A company develops applications in separate AWS accounts that are all part of an organization in AWS Organizations.An operations team creates an IAM user for each developer for a given application.As the company has grown, the number of applications has increased.Developers now work on several applications and need to view and access all their project accounts.A solutions architect must design a solution that minimizes the operational overhead for the operations team.What should the solutions architect do to meet these requirements?Read More →

A survey company has gathered data for several years from areas in the United States.The company hosts the data in an Amazon S3 bucket that is 3 TB in size and growing.The company has started to share the data with a European marketing firm that has S3 buckets.The company wants to ensure that its data transfer costs remain as low as possible.Which solution will meet these requirements?Read More →

A company is expanding a secure, on-premises network to AWS. The on-premises network has no direct internet access. The company is setting up am AWSDirect Connect connection between the on-premises network and AWS. An application that runs in the on-premises network needs to use the AWS software development kits (SDKs).A solutions architect must design a solution that supports this connectivity. However, the solution cannot incur additional cost beyond the cost of the DirectConnect connection.Which solution will meet these requirements?Read More →

To meet security requirements, a company needs to encrypt all of its application data in transit while communicating with an Amazon RDS MySQL DB instance.A recent security audit revealed that encryption at rest is enabled using AWS Key Management Service (AWS KMS), but data in transit is not enabled.What should a solutions architect do to satisfy the security requirements?Read More →

A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region.A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks.Which solution will meet these requirements with the LEAST amount of administrative effort?Read More →

A company runs a static website through its on-premises data center.The company has multiple servers that handle all of its traffic, but on busy days, services are interrupted and the website becomes unavailable.The company wants to expand its presence globally and plans to triple its website traffic.What should a solutions architect recommend to meet these requirements?Read More →

A company wants to share forensic accounting data that is stored in an Amazon RDS DB instance with an external auditor.The auditor has its own AWS account and requires its own copy of the database.How should the company securely share the database with the auditor?Read More →