Question 1

A company is building applications in containers. The company wants to migrate its on-premises development and operations services from its on-premises data center to AWS. Management states that production system must be cloud agnostic and use the same configuration and administrator tools across production systems. A solutions architect needs to design a managed solution that will align open-source software. Which solution meets these requirements?

Accepted Answer

Amazon Elastic Kubernetes Service (Amazon EKS) is a managed Kubernetes service that allows for cloud-agnostic container orchestration, aligning with open-source software and enabling the use of the same configuration and tools across different environments.

Question 2

A company's near-real-time streaming application is running on AWS. As the data is ingested, a job runs on the data and takes 30 minutes to complete. The workload frequently experiences high latency due to large amounts of incoming data. A solutions architect needs to design a scalable and serverless solution to enhance performance. Which combination of steps should the solutions architect take? (Choose two.)

Accepted Answer

The answer of A company's near-real-time streaming application is running...

Question 3

A company needs to comply with a regulatory requirement that states all emails must be stored and archived externally for 7 years. An administrator has created compressed email files on premises and wants a managed service to transfer the files to AWS storage. Which managed service should a solutions architect recommend?

Accepted Answer

The answer of A company needs to comply with a...

Question 4

A company has a highly dynamic batch processing job that uses many Amazon EC2 instances to complete it. The job is stateless in nature, can be started and stopped at any given time with no negative impact, and typically takes upwards of 60 minutes total to complete. The company has asked a solutions architect to design a scalable and cost-effective solution that meets the requirements of the job. What should the solutions architect recommend?

Accepted Answer

Spot Instances are cost-effective for stateless, flexible workloads that can be interrupted, making them ideal for this batch processing job.

Question 5

A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution, but wants to further reduce data transfer costs. The company cannot modify the application's source code. What should a solutions architect do to reduce costs?

Accepted Answer

Lambda@Edge can be used to compress files on-the-fly, reducing the amount of data transferred and thus lowering costs.

Question 6

A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAF. How should the solutions architect comply with these requirements?

Accepted Answer

Using an origin access identity (OAI) with CloudFront ensures that only CloudFront can access the S3 bucket directly, while AWS WAF can be enabled on the CloudFront distribution to inspect all incoming traffic.

Question 7

A company has media and application files that need to be shared internally. Users currently are authenticated using Active Directory and access files from a Microsoft Windows platform. The chief executive officer wants to keep the same user permissions, but wants the company to improve the process as the company is reaching its storage capacity limit. What should a solutions architect recommend?

Accepted Answer

Amazon FSx for Windows File Server is designed for Windows-based applications and supports integration with Active Directory, allowing the company to maintain the same user permissions while providing scalable storage.

Question 8

A solutions architect is designing a security solution for a company that wants to provide developers with individual AWS accounts through AWS Organizations, while also maintaining standard security controls. Because the individual developers will have AWS account root user-level access to their own accounts, the solutions architect wants to ensure that the mandatory AWS CloudTrail configuration that is applied to new developer accounts is not modified. Which action meets these requirements?

Accepted Answer

A service control policy (SCP) can be used to enforce restrictions across all accounts in an AWS Organization, including preventing changes to CloudTrail configurations in developer accounts.

Question 9

A company has a 10 Gbps AWS Direct Connect connection from its on-premises servers to AWS. The workloads using the connection are critical. The company requires a disaster recovery strategy with maximum resiliency that maintains the current connection bandwidth at a minimum. What should a solutions architect recommend?

Accepted Answer

Setting up two new Direct Connect connections, one in the current AWS Region and one in another Region, provides maximum resiliency and maintains the current connection bandwidth.

Question 10

A company is deploying a web portal. The company wants to ensure that only the web portion of the application is publicly accessible. To accomplish this, the VPC was designed with two public subnets and two private subnets. The application will run on several Amazon EC2 instances in an Auto Scaling group. SSL termination must be offloaded from the EC2 instances. What should a solutions architect do to ensure these requirements are met?

Accepted Answer

The Application Load Balancer (ALB) should be placed in the public subnets to handle incoming traffic and perform SSL termination. The Auto Scaling group should be in the private subnets to ensure that the application instances are not directly accessible from the internet.

Question 11

A company uses Amazon Redshift for its data warehouse. The company wants to ensure high durability for its data in case of any component failure. What should a solutions architect recommend?

Accepted Answer

Cross-Region snapshots provide a backup of the data in a different region, ensuring data durability and availability in case of a regional failure.

Question 12

An application is running on an Amazon EC2 instance and must have millisecond latency when running the workload. The application makes many small reads and writes to the file system, but the file system itself is small. Which Amazon Elastic Block Store (Amazon EBS) volume type should a solutions architect attach to their EC2 instance?

Accepted Answer

The answer of An application is running on an Amazon...

Question 13

A company receives inconsistent service from its data center provider because the company is headquartered in an area affected by natural disasters. The company is not ready to fully migrate to the AWS Cloud, but it wants a failure environment on AWS in case the on-premises data center fails. The company runs web servers that connect to external vendors. The data available on AWS and on premises must be uniform. Which solution should a solutions architect recommend that has the LEAST amount of downtime?

Accepted Answer

Option A provides the least amount of downtime because it uses an Amazon Route 53 failover record to automatically switch traffic to the AWS environment in the event of an on-premises failure. The use of an Application Load Balancer and Auto Scaling group ensures high availability and scalability of the application servers. AWS Storage Gateway with stored volumes provides data backup to Amazon S3, ensuring data consistency between the on-premises and AWS environments.

Question 14

A company uses Application Load Balancers (ALBs) in different AWS Regions. The ALBs receive inconsistent traffic that can spike and drop throughout the year. The company's networking team needs to allow the IP addresses of the ALBs in the on-premises firewall to enable connectivity. Which solution is the MOST scalable with minimal configuration changes?

Accepted Answer

AWS Global Accelerator provides static IP addresses that can be used to route traffic to the ALBs across different regions, minimizing the need for frequent firewall updates.

Question 15

A company hosts an application used to upload files to an Amazon S3 bucket. Once uploaded, the files are processed to extract metadata, which takes less than 5 seconds. The volume and frequency of the uploads varies from a few files each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements. What should the solutions architect recommend?

Accepted Answer

Using an S3 event notification to trigger an AWS Lambda function is cost-effective and scalable for processing files as they are uploaded to the S3 bucket. Lambda can handle varying loads and is suitable for tasks that take a short amount of time, like extracting metadata.

Question 16

A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability. Which storage solution meets these requirements?

Accepted Answer

Amazon S3 Intelligent-Tiering automatically moves data between two access tiers when access patterns change, optimizing costs while maintaining high durability and availability.

Question 17

A solutions architect is performing a security review of a recently migrated workload. The workload is a web application that consists of Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The solutions architect must improve the security posture and minimize the impact of a DDoS attack on resources. Which solution is MOST effective?

Accepted Answer

The answer of A solutions architect is performing a security...

Question 18

As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information. Which solution meets these requirements?

Accepted Answer

Cost Explorer provides a report of AWS billed items listed by user, which can be downloaded for further analysis and budgeting purposes.

Question 19

A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversation. What should a solutions architect do to accomplish this?

Accepted Answer

Launching an Amazon EC2 instance in the same region as the S3 bucket minimizes data transfer costs because data transfer between S3 and EC2 in the same region is free.

Question 20

A company is developing a real-time multiplier game that uses UDP for communications between client and servers in an Auto Scaling group. Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly. Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention. Which solution should a solutions architect recommend?

Accepted Answer

A Network Load Balancer is suitable for handling UDP traffic, and Amazon DynamoDB on-demand can automatically scale to handle varying loads without manual intervention, making it ideal for storing non-relational data like gamer scores.

Exam 9: AWS Certified Solutions Architect - Associate SAA-C02

A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAF. How should the solutions architect comply with these requirements?

A company uses Amazon Redshift for its data warehouse. The company wants to ensure high durability for its data in case of any component failure. What should a solutions architect recommend?

As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information. Which solution meets these requirements?