Question: 1

A solutions architect is creating a new VPC design. There are two public subnet for the load balancer,

two private subnets for web servers, and two private subnets for MySQL. The web serves use only

HTTPS.

The solutions architect has already created a security group for the load Balancer allowing port 443 from

0.0 0.0/0. Company policy requires that each resource has the least access required to still be able to

perform its tasks.

Which additional configuration strategy should the solution architect use to meet these requirements?

A. Create a security group far the web servers and allow port 443 from 0.0.0.070. Create a security

group tor the MySQL serve's aid allow port 3306 from the web servers security group.

B. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL

for the MySQL servers and allow port 3306 from the web servers security group

C. Create a security group for the web servers and allow port 443 from the load balancer. Create a

security group tor the MySQL servers and allow port 3306 from the web sewers security group

D. Create a network ACL for the web servers and allow port 443 from the web balancer. Create a

network

ACL for the MySQL servers and allow port 3306 from the web servers security group.

Answer: C 

Question: 2

A company runs an application on an Amazon EC2 instance Backed by Amazon Elastic Block Store

(Amazon EBS). The instance needs to be available for 12 hours daily. The company wants to save costs

by making the instance unavailable outside the window required for the application However the

contents of the instance's memory must be preserved whenever the instance is unavailable

What should a solutions architect do to meet this requirement?

A. Stop the instance outside the application's availability window. Start up the Instance again when

required.

B. Hibernate tie instance outside the application's availability window. Start up the instance again when

required.

C. Use Auto Scaling to scale down the instance outside the application's availability window. Scale up the

instance when required.

D. Terminate the instance outside the application's availability window Launch the instance by using a

preconfigured Amazon Machine Image (AMI) when required

Answer: B 

Question: 3

A company Is migrating lo the AWS Cloud. A file server is the first workload to migrate. Users must be

able to access the file share using the Server Message Block (SMB) protocol.

Which AWS managed service meets these requirements''

A. Amazon EBS

B. Amazon EC2

C. Amazon FSx

D. Amazon S3

Answer: B 

Question: 4

A solutions architect needs to design a resilient solution for Windows users' home directories. The solution must provide fault tolerance, file-level backup and recovery, and access control, based upon the

company's Active Directory.

Which storage solution meets these requirements?

A. Configure Amazon S3 to store the users' home directories. Join Amazon S3 to Active Directory.

B. Configure a Multi-AZ file system with Amazon FSx for Windows File Server Join Amazon FSx to Active

Directory.

C. Configure Amazon Elastic File System (Amazon EFS) for the users' home directories. Configure AWS

Single Sign-On with Active Directory.

D. Configure Amazon Elastic Block Store (Amazon EBS) to store the users' home directories Configure

AWS Single Sign-On with Active Directory.

Answer: A 

Question: 5

A company has a legacy application that processes data in two parts. The second part of the process

takes longer than the first, so the company has decided to rewrite the application as two microservices

running on Amazon ECS that can scale independently

How should a solutions architect integrate the microservices?

A. Implement code in microservice 1 to send data to an Amazon S3 bucket. Use S3 event notifications to

invoke microservice 2

B. Implement code in microservice 1 to publish data to an Amazon SNS topic. Implement code In

microservice 2 to subscribe to this topic.

C. Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose. Implement code in

microservice 2 to read from Kinesis Data Firehose.

D. Implement code in microservice 1 to send data to an Amazon SOS queue. Implement code in

microservice 2 to process messages from the queue.

Answer: A 

Question: 6

A company hosts its application using Amazon Elastic Container Service (Amazon ECS) and wants to

ensure high availability. The company wants to be able (o deploy updates to its application even if nodes

in one Availability Zone are not accessible.

The expected request volume for the application is 100 requests per second, and each container task is

able to serve at least 60 requests pet second The company set up Amazon ECS with a rolling update

deployment type with the minimum healthy percent parameter set to 50% and the maximum percent

set lo 100%.

Which configuration of tasks and Availability Zones meets these requirements?

A. Deploy the application across two Availability Zones, with one task in each Availability Zone

B. Deploy the application across two Availability Zones, with two tasks in each Availability Zone.

C. Deploy the application across three Availability Zones, with one task in each Availability Zone.

D. Deploy the application across three Availability Zones, with two tasks in each Availability Zone.

Answer: A 

Question: 7

A website runs a web application that receives a burst of traffic each day at noon. The users upload new

pictures and content daily, but have been complaining of timeouts. The architecture uses Amazon EC2

Auto Seating groups, and the custom application consistently takes 1 minute to initiate upon boot up

before responding to user requests

How should a solutions architect redesign the architecture to better respond to changing traffic?

A. Configure a Network Load Balancer with a slow start configuration.

B. Configure AWS ElastiCache for Redis to offload direct requests to the servers

C. Configure an Auto Scaling step scaling policy with an instance warmup condition.

D. Configure Amazon CloudFront to use an Application Load Balancer as the origin.

Answer: B 

More Info:

https://www.amazondumps.us/saa-c02-dumps-pdf-questions-answers.html