SAA-C02 Free Practice Test

A company is performing an AWS Well-Architected Framework review of an existing workload deployed on AWS. The review identified a public-facing website running on the same Amazon EC2 instance as a Microsoft Active Directory domain controller that was install recently to support other AWS services. A solutions architect needs to recommend a new design that would improve the security of the architecture and minimize the administrative demand on IT staff.
What should the solutions architect recommend?

1. A. Use AWS Directory Service to create a managed Active Director
2. B. Uninstall Active Directory on the current EC2 instance.
3. C. Create another EC2 instance in the same subnet and reinstall Active Directory on i
4. D. Uninstall Active Directory.
5. E. Use AWS Directory Service to create an Active Directory connecto
6. F. Proxy Active Directory requests to the Active domain controller running on the current EC2 instance.
7. G. Enable AWS Single Sign-On (AWS SSO) with Security Assertion Markup Language (SAML) 2.0 federation with the current Active Directory controlle
8. H. Modify the EC2 instance’s security group to deny public access to Active Directory.

Correct Answer: C

A company’s web application uses an Amazon RDS PostgreSQL DB instance to store its application data. During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

1. A. Create a read replica and direct reporting traffic to the replica.
2. B. Create a Multi-AZ database and direct reporting traffic to the standby.
3. C. Create a cross-Region read replica and direct reporting traffic to the replica.
4. D. Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.

Correct Answer: B

A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access
Which of the following would be the LEAST complicated implementation?

1. A. Use an Amazon CloudFront distribution with an origin access identity (OAI) Configure the distribution with an Amazon S3 origin to provide access to the file through signed URL’s Design a Lambda function to remove data that is older than 14 days.
2. B. Use an S3 bucket and provide direct access to the tile Design the application to track purchases in a DynamoDH tableConfigure a Lambda function to remove data that is older than 14 days based on a query to Amazon DynamoDB
3. C. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to sot an expiration of 14 days for the URL
4. D. Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to set an expiration of 60 minutes for the URL and recreate the URL as necessary

Correct Answer: C

An Amazon EC2 administrator created the following policy associated with an 1AM group containing several users.
<>

1. A. Users can terminate an EC2 instance in any AWS Region except us-east-1.
2. B. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region
3. C. Users can terminate an EC2 instance in the us-east-1 Region when the user\'s source IP is 10.100.100.254
4. D. Users cannot terminate an EC2 instance in the us-east-1 Region when the user\'s source IP is 10.100. 100. 254

Correct Answer: C

A solutions architect needs to design a managed storage solution for a company's application that includes high-performance machine learning This application runs on AWS Fargate and the connected storage needs to have concurrent access to files and deliver high performance.
Which storage option should the solutions architect recommend?

1. A. Create an Amazon S3 bucket for the application and establish an 1AM role for Fargate to communicate with Amazon S3
2. B. Create an Amazon FSx for Lustre file share and establish an 1AM role that allows Fargate to communicate with FSx for Lustre.
3. C. Create an Amazon Elastic File System (Amazon EFS) file share and establish an 1AM role that allows Fargate to communicate with Amazon EFS.
4. D. Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an 1AM role that allows Fargate to communicate with Amazon EBS

Correct Answer: B