A company is running an online transaction processing (OLTP) workload on AWS. This workload uses an unencrypted Amazon RDS DB instance in a Multi-AZ deployment. Daily database snapshots are taken from this instance.What should a solutions architect do to ensure the database and snapshots are always encrypted moving forward?
Answer(s): A
Encrypting the latest DB snapshot ensures all future restores originate from an encrypted source, meeting the requirement to have encrypted backups and DB instances moving forward in an OLTP Multi-AZ setup.A) Correct: Encrypting a copy of the latest DB snapshot and replacing the instance ensures encryption applies to both the snapshot history and the restored instance, satisfying encryption for backups and data at rest.B) Incorrect: EBS encryption on a new volume does not encrypt existing snapshots or automatically encrypt the RDS automated backups or DB instance storage.C) Incorrect: You cannot encrypt an existing unencrypted snapshot by copying and enabling encryption to restore into an existing DB instance; encryption must be applied at restore time, not retroactively here.D) Incorrect: Storing snapshots in S3 with SSE-KMS is not how RDS backups are managed; RDS backups remain within RDS and snapshots are not copied to S3 for encryption.
A company wants to build a scalable key management infrastructure to support developers who need to encrypt data in their applications.What should a solutions architect do to reduce the operational burden?
Answer(s): B
AWS KMS provides a managed, scalable key management service that handles key storage, rotation, policy enforcement, and access control, reducing operational burden for developers. A) MFA protects access but does not reduce management tasks for keys. C) ACM manages certificates, not general data encryption keys for application data. D) IAM policies control permissions but do not reduce key management operations or provide key lifecycle automation. Therefore, B is the correct choice.
A company has a dynamic web application hosted on two Amazon EC2 instances. The company has its own SSL certificate, which is on each instance to perform SSL termination.There has been an increase in traffic recently, and the operations team determined that SSL encryption and decryption is causing the compute capacity of the web servers to reach their maximum limit.What should a solutions architect do to increase the application's performance?
Answer(s): D
The correct approach offloads SSL termination to a managed service and distributes load via a load balancer, freeing EC2 instances to serve requests. D uses ACM to manage the certificate and an Application Load Balancer with HTTPS listener, performing TLS termination at the ALB and routing to the EC2 fleet, improving scalability and performance.A is wrong because ACM certificates cannot be installed directly on EC2 to terminate TLS; ACM is for AWS-managed termination at ELB/CloudFront, not manual installation on instances.B is wrong because S3 is not a web TLS termination target and cannot serve HTTPS for dynamic web traffic; SSL termination would not occur there.C is wrong because adding a proxy adds another hop and single point of scaling challenges; it does not offload TLS at the edge and is less scalable than an ALB with ACM.
A company has a highly dynamic batch processing job that uses many Amazon EC2 instances to complete it. The job is stateless in nature, can be started and stopped at any given time with no negative impact, and typically takes upwards of 60 minutes total to complete. The company has asked a solutions architect to design a scalable and cost-effective solution that meets the requirements of the job.What should the solutions architect recommend?
Spot Instances provide cost savings for a highly dynamic, fault-tolerant batch job that can be started and stopped at any time, with no state. They enable large-scale parallel processing at significantly lower price, suitable for stateless long-running tasks. Reserved Instances are fixed and require commitment, not ideal for dynamic workloads. On-Demand Instances are more expensive for long-running batch without need for flexibility. Lambda is unsuitable for long (60+ minutes) and potentially high-compute workloads due to execution limits and scaling model. Therefore A is correct; B, C, D are not cost- or fit-appropriate.
A company runs its two-tier ecommerce website on AWS. The web tier consists of a load balancer that sends traffic to Amazon EC2 instances. The database tier uses an Amazon RDS DB instance. The EC2 instances and the RDS DB instance should not be exposed to the public internet. The EC2 instances require internet access to complete payment processing of orders through a third-party web service. The application must be highly available.Which combination of configuration options will meet these requirements? (Choose two.)
Answer(s): A,D
The correct options ensure HA while keeping DB/EC2 private from the internet and enabling outbound internet access for EC2.A) EC2 in private subnets with ASG and RDS Multi-AZ in private subnets provides private->private architecture for web tier and resilient database, meeting HA and isolation requirements. D) VPC with two public subnets, two private subnets, and two NAT gateways across AZs, with an Application Load Balancer in the public subnets, gives internet-facing load balancing for the web tier while backend resources remain private; NAT gateways allow EC2 instances in private subnets to access the internet for payment processing. B) ALB in private subnets prevents external access to the web tier; but the requirement is a publicly accessible web tier, and two NAT gateways alone do not ensure public ALB placement. C) EC2 in public subnets exposes instances to the internet; RDS private is fine, but public EC2 undermines the security requirement.
A solutions architect needs to implement a solution to reduce a company's storage costs. All the company's data is in the Amazon S3 Standard storage class. The company must keep all data for at least 25 years. Data from the most recent 2 years must be highly available and immediately retrievable.Which solution will meet these requirements?
S) B) B) Correct: Transition data after 2 years ensures the most recent 2 years remain in S3 Standard or readily accessible lifecycle while older data moves to Glacier Deep Archive, meeting 25-year retention and cost savings.A) Incorrect: Immediate transition to Glacier Deep Archive violates the requirement for highly available and immediately retrievable data for the most recent 2 years.C) Incorrect: S3 Intelligent-Tiering archiving option is not applicable to guarantee immediate retrievability to 2 years; it optimizes by tiering but does not guarantee Glacier Deep Archive as the target for the time window.D) Incorrect: S3 One Zone-IA is not durable or highly available like Standard; immediate transition followed by 2-year rule does not satisfy the requirement for long-term cost-effective, highly available storage for the initial period.
A media company is evaluating the possibility of moving its systems to the AWS Cloud. The company needs at least 10 TB of storage with the maximum possible I/O performance for video processing, 300 TB of very durable storage for storing media content, and 900 TB of storage to meet requirements for archival media that is not in use anymore.Which set of services should a solutions architect recommend to meet these requirements?
The correct answer is D.A) Incorrect: EC2 instance store is ephemeral and not durable; unsuitable for archival or durable storage needs. B) Incorrect: EFS is durable but not cost-optimized for large archival workloads; S3 Glacier is appropriate for archival. EBS for 10 TB and high IOPS is excessive here.C) Incorrect: EC2 instance store again is ephemeral and not durable; EC2 for archival storage is inappropriate, and S3 is better for durable/archival storage.D) Correct: EC2 instance store offers maximum I/O on the instance for video processing, S3 provides durable storage for 300 TB with high durability, and S3 Glacier provides cost-effective archival storage for 900 TB.
A company wants to run applications in containers in the AWS Cloud. These applications are stateless and can tolerate disruptions within the underlying infrastructure. The company needs a solution that minimizes cost and operational overhead.What should a solutions architect do to meet these requirements?
Spot instances in an EKS managed node group provide cost savings with automated lifecycle and capacity management suitable for stateless, disruption-tolerant workloads, minimizing operational overhead while leveraging Kubernetes scheduling for containerized apps. A) EC2 Auto Scaling with Spot Instances is viable but lacks Kubernetes management benefits and ecosystem for container orchestration. C) On-Demand in EC2 ASG ensures availability but higher cost and no automation for Kubernetes. D) On-Demand in EKS node group reduces cost efficiency compared to Spot-based EKS nodes. Thus B correctly combines cost efficiency, managed Kubernetes control plane, and minimal overhead for stateless containers.
Share your comments for Amazon SAA-C02 exam with other users:
wrong answer. it is true not false.
please i need the mo-100 questions
very good use full
very valid questions
will these question help me to clear pl-300 exam?
please provide me with these dumps questions. thanks
in the pdf downloaded is write google cloud database engineer i think that it isnt the correct exam
i think you have the answers wrong regarding question: "what are three core principles of web content accessibility guidelines (wcag)? answer: robust, operable, understandable
these questions are not valid , they dont come for the exam now
question looks valid
good for practice
need more q&a to go ahead
question 59 - a newly-created role is not assigned to any user, nor granted to any other role. answer is b https://docs.snowflake.com/en/user-guide/security-access-control-overview
just passed my exam today. i saw all of these questions in my text today. so i can confirm this is a valid dump.
needed dumps
very helpful
will post once the exam is finished
relevant questions
just clear exam on 10/06/2202 dumps is valid all questions are came same in dumps only 2 new questions total 46 questions 1 case study with 5 question no lab/simulation in my exam please check the answers best of luck
q.112 - correct answer is c - the event registry is a module that provides event definitions. answer a - not correct as it is the definition of event log
good and useful.
good questions
good content
totally not correct answers. 21. you have one gcp account running in your default region and zone and another account running in a non-default region and zone. you want to start a new compute engine instance in these two google cloud platform accounts using the command line interface. what should you do? correct: create two configurations using gcloud config configurations create [name]. run gcloud config configurations activate [name] to switch between accounts when running the commands to start the compute engine instances.
kindly upload the dumps
still learning
excellent way to learn
help so much
understand sql col.
i would give 5 stars to this website as i studied for az-800 exam from here. it has all the relevant material available for preparation. i got 890/1000 on the test.
this is nice.
q55- the ridac workflow can be modified using flow designer, correct answer is d not a
by far this is the most accurate exam dumps i have ever purchased. all questions are in the exam. i saw almost 90% of the questions word by word.
i cleared the az-104 exam by scoring 930/1000 on the exam. it was all possible due to this platform as it provides premium quality service. thank you!