Amazon Solutions Architect SAA-C02 Practice Exam 1

You have been tasked to improve the security of the data flow between your Amazon Redshift cluster and other resources. The very first step is to use VPC flow logs to monitor all the COPY and UNLOAD traffic of your Redshift cluster that moves in and out of your VPC.

Which of the following option is the most suitable solution to improve the security of your data?

At ExamsDigest we use machine learning technologies to collect and analyze data, and we use Amazon Redshift for a data warehouse. Now, we need your help to implement a disaster recovery plan for ExamsDigest to automatically back up our cluster to a second AWS region in the event of an AWS region outage.

Which of the following option will you suggest to implement?

Type the remaining AWS CLI Lambda command to update a function’s memory setting to 256MB. The name of the function is “examsdigest-function”.

An IoT application requires a service that can collect, process, and analyze IoT telemetry data for machine learning in real-time. Which of the following is the most suitable AWS service to use for the application?

An eCommerce marketplace uses an Auto Scaling group of EC2 instances, in multiple Availability Zones with an Application Load Balancer, to increase the availability and performance of the app. To better serve the users you decide to localize the content of the website, so each time users from Germany visit the site will be directed to de.marketplace.com and users from China to ch.marketplace.com.

Which of the following rule condition type allows you to route requests to multiple domains using a single load balancer?

Your company has just launched a new application that will be deployed on AWS which runs multiple components in Docker containers. Your company decides to use AWS managed infrastructure for running the containers as they do not want to manage EC2 instances.

Which of the following solution would address the requirement? (Choose two)

A new VR/AR platform is using Docker considering that application containers are optimal for running small, decoupled services. You have been tasked to implement a solution that removes the need to provision and manage servers, pay for resources per application, and improve security through application isolation by design.

Which of the following AWS service will be used for this new platform?

You are working on a blockchain application in AWS which will be deployed in an Auto Scaling group of On-Demand EC2 instances and a MySQL database. It is expected that the database will have high-throughput workloads performing intensive I/O operations. As the Solutions Architect, you are required to properly set up and launch the required resources in AWS.

Which of the following is the most suitable EBS type to use for your database?

Your new online event management application is hosted in AWS. The application uses Multi-AZ RDS for its database tier, which has a standby replica. What are the events that will make Amazon RDS to automatically perform a failover to the standby replica? (Select all that apply.)

You have just created a new On-Demand EC2 instance located in a subnet with ID subnet-aa181cd0 and IPv4 CIRD 172.31.16.0/20 in AWS which hosts your WordPress blog site. The security group attached to this EC2 instance has the following Inbound Rules:

You can establish an FTP connection into the EC2 instance from the internet. However, you are not able to establish an SSH connection from the internet. How to resolve the issue?

The mobile application you have just launched stores player and score information using Amazon S3 and DynamoDB. The users of your app can sign in using an external identity provider (IdP), such as Login with Amazon, Facebook, or Google. Amazon recommends that you do not embed or distribute long-term AWS credentials with apps that a user downloads to a device, even in an encrypted store.

Which AWS Security Token Service will you use to requests temporary AWS security credentials when needed?

You are developing a service marketplace platform in which people buy and sell online services. The project manager instructed you that the API calls on the AWS resources should be monitored and recorded. You used CloudTrail to help you in compliance, operational, and risk auditing of your AWS account. The project manager asked you where does CloudTrail store all of the logs?

You are working on a Video Resume maker app that can be used as a repository for videos by candidates. When a candidate uploads a video, the video would be sent to Kinesis for processing before it is stored in an S3 bucket. Once the video is uploaded a success notification is sent to the candidate. The process takes approximately 7 minutes to finish.

Which of the following options will allow you to asynchronously process the request to the application in the most cost-effective way?

Υou have just launched a new Online Travel Agency (OTA) application so accommodation owners can log into and upload their property types. Since you are in the early stage and the funding is still hard to come by without investors, you need to get an alert when the AWS service cost or usage exceed your budgeted amount.

Which of the following services can help you manage the budgets for all your AWS resources?

You have hosted your new application in an Auto Scaling group of EC2 instances. Now you need to implement an SSL solution for your system to improve its security. The certificate is obtained from a third-party issuer.

Where can you import the SSL/TLS certificate to improve the security of your application?