Free Amazon AWS Certified Solutions Architect – Associate (SAA-C02) Exam AWS-Solution-Architect-Associate Exam Practice Test

A company needs to retain application logs files for a critical application for 10 years. The application team regularly accesses logs from the past month for troubleshooting, but logs older than 1 month are rarely accessed. The application generates more than 10 TB of logs per month.Which storage option meets these requirements MOST cost-effectively?

• Store the Iogs in Amazon S3 Use AWS Backup lo move logs more than 1 month old to S3 Glacier Deep Archive
• Store the logs in Amazon S3 Use S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive
• Store the logs in Amazon CloudWatch Logs Use AWS Backup to move logs more then 1 month old to S3 Glacier Deep Archive
• Store the logs in Amazon CloudWatch Logs Use Amazon S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive

A company hosts a popular website in the AWS Cloud, A solutions architect needs to provide reports about user click behaviour in near-real time as users navigate the website.Which solution will meet this requirement

• Store the clickstream data in Amazon DynamoDB. Deploy an application that runs on AWS Elastic Beanstalk to process and analyze the data.
• Push the clickstream data from each session to an Amazon Kinesis data stream Analyze the dab by using Amazon Kinesis Data Analytics.
• Store the clickstream data in an Amazon S3 bucket. Order the data by timestamp Process the data with an AWS Lambda function that is subscribed to object creation events on the S3 bucket.
• Forward the clickstream data to Amazon Simple Queue Service (Amazon SOS) Store the data In an Amazon ROS for MySQL DB instance. Deploy Amazon FC2 Instances to process and analyze the data

A company wants to run its critical applications in containers to meet requirements tor scalability and availability The company prefers to focus on maintenance of the critical applications The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workloadWhat should a solutions architect do to meet those requirements?

• Use Amazon EC2 Instances, and Install Docker on the Instances
• Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes
• Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate
• Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-op6mized Amazon Machine Image (AMI).

A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files A solutions architect needs to implement a highly available SFTP solution that minimizes operational overheadWhich solution will meet these requirements?

• Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint Choose the S3 data lake as the destination
• Use Amazon S3 File Gateway as an SFTP server Expose the S3 File Gateway endpoint URL to the new partner Share the S3 File Gateway endpoint with the new partner
• Launch an Amazon EC2 instance in a private subnet in a VPC Instruct the new partner to upload files to the EC2 instance by using a VPN Run a cron job script on the EC2 instance to upload files to the S3 data lake
• Launch Amazon EC2 instances in a private subnet in a VPC Place a Network Load Balancer (NLB) in front of the EC2 instances Create an SFTP listener port for the NLB Share the NLB hostname with the new partner. Run a cron job script on the EC2 instances to upload files to the S3 data lake

A company has an application that uses Amazon Elastic File System (Amazon EFS) to store data. The files are 1 GB in size or larger and are accessed often only for the first few days after creation The application data is shared across a cluster of Linux servers The company wants to reduce storage costs for the application.What should a solutions architect do to meet these requirements?

• Implement Amazon FSx and mount the network drive on each server
• Move the files from Amazon EFS and store them locally on each Amazon EC2 instance
• Configure a lifecycle policy to move the files to the EFS Infrequent Access (IA) storage class after 7 days.
• Move the files to Amazon S3 with S3 Lifecycle policies enabled. Rewrite the application to support mounting the S3 bucket

A company currently operates a web application backed by an Amazon RDS MySQL database It has automated backups that are run daily and are not encrypted A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed The company will make at least one encrypted backup before destroying the old backups.What should be done to enable encryption for future backups?

• Enable default encryption for the Amazon S3 bucket where backups are stored
• Modify the backup section of the database configuration to toggle the Enable encryption check box
• Create a snapshot of the database Copy it to an encrypted snapshot Restore the database from the encrypted snapshot
• Enable an encrypted read replica on RDS for MySQL Promote the encrypted read replica to primary Remove the original database instance

A company needs to run its external website on Amazon EC2 instances and on-premises virtualized servers The AWS environment has a 1 GB AWS Direct Connect connection to the data center The application has IP addresses that will not change The on-premises and AWS servers are able to restart themselves while maintaining the same IP address if a failure occurs Some website users have to add their vendors to an allow list, so the solution must have a fixed IP address The company needs a solution with the lowest operational overhead to handle this split trafficWhat should a solutions architect do to meet these requirements?

• Deploy an Amazon Route 53 Resolver with rules pointing to the on-premises and AWS IP addresses
• Deploy a Network Load Balancer on AWS Create target groups for the on-premises and AWS IP addresses
• Deploy an Application Load Balancer on AWS Register the on-premises and AWS IP addresses with the target group
• Deploy Amazon API Gateway to direct traffic to the on-premises and AWS IP addresses based on the header of the request

A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application's traffic recently spiked due to fraudulent requests from botnets.Which steps should a solutions architect take to block requests from unauthorized users? (Select TWO.)

• Create a usage plan with an API key that it shared with genuine users only.
• Integrate logic within the Lambda function to ignore the requests lion- fraudulent IP addresses
• Implement an AWS WAF rule to target malicious requests and trigger actions to filler them out
• Convert the existing public API to a private API Update the DNS records to redirect users to the new API endpoint
• Create an IAM role tor each user attempting to access the API A user will assume the role when making the API call

A company has developed a microservices application. It uses a client-facing API with Amazon API Gateway and multiple internal services hosted on Amazon EC2 instances to process user requests The API is designed to support unpredictable surges in traffic, but internal services may become overwhelmed and unresponsive for a period of time during surges A solutions architect needs to design a more reliable solution that reduces errors when internal services become unresponsive or unavailableWhich solution meets these requirements?

• Use AWS Auto Scaling to scale up internal services when there is a surge in traffic
• Use different Availability Zones to host internal services. Send a notification to a system administrator when an internal service becomes unresponsive.
• Use an Elastic Load Balancer to distribute the traffic between internal services Configure Amazon CloudWatch metrics to monitor traffic to internal services.
• Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive. Change the internal services to retrieve the requests from the queue for processing.

A company is planning to build a new web application on AWS The company expects predictable traffic most of the year and very high traffic on occasion. The web application needs to be highly available and fault tolerant with minimal latency.What should a solutions architect recommend to meet these requirements?

• Use an Amazon Route 53 routing policy to distribute requests to two AWS Regions each with one Amazon EC2 instance
• Use Amazon EC2 instances in an Auto Scaling group with an Application Load Balancer across multiple Availability Zones
• Use Amazon EC2 instances in a cluster placement group with an Application Load Balancer across multiple Availability Zones
• Use Amazon EC2 instances in a cluster placement group and include the cluster placement group within a new Auto Scaling group