With the help of Our SAA-C02 braindumps you can easily pass your Amazon SAA-C02 Exam. If you already done your preparation for exam then we have perfect tool to check your preparation before going for exam. You can attempt exam in exam mode. Exactly same scenario will be provided by us for the help of students.
Our aim to help students not only earn. Our Aws exam question answers are fully verified by IT professionals that have number of year's experience. If you are scared to done transaction then you can check Amazon SAA-C02 demo before your order submission.
Our support staff available here 24/7 you can ask anything about your exam or you can ask for demo of your desired exam.
We are fully assure that you will not lose anything you will pass your AWS exam with highest possible scores.
Sample Questions
Question 1
A solutions architect must design a solution that uses Amazon CloudFront with an Amazon
S3 origin to store a static website. The company's security policy requires that all website
traffic be inspected by AWS WAF.
How should the solutions architect comply with these requirements?
A. Configure an S3 bucket policy to accept requests coming from the AWS WAF Amazon
Resource Name (ARN) only.
B. Configure Amazon CloudFront to forward all incoming requests to AWS WAF before
requesting content from the S3 origin.
C. Configure a security group that allows Amazon CloudFront IP addresses to access
Amazon S3 only. Associate AWS WAF to CloudFront.
D. Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to
restrict access to the S3 bucket Enable AWS WAF on the distribution
ANSWER : D
Question 2
A company has a custom application running on an Amazon EC2 instance that
• Reads a large amount of data from Amazon S3
• Performs a multi-stage analysis.
Writes the results to Amazon DynamoDB
The application writes a significant number of large, temporary files during the multi-stage
analysis. The process performance depends on the temporary storage performance. What
would be the fastest storage option for holding the temporary files?
A. Multiple Amazon S3 buckets with Transfer Acceleration for storage
B. Multiple Amazon EBS drives with Provisioned IOPS and EBS optimization
C. Multiple Amazon EFS volumes using the Network File System version 4 1 (NFSv4 1)
protocol
D. Multiple instance store volumes with software RAID 0.
ANSWER : A
Question 3
A company has created a multi-tier application for its ecommerce website The website
uses an Application Load Balancer that resides in the public subnets, a web tier in the
public subnets, and a MySQL cluster hosted on Amazon EC2 instances in the private
subnets. The MySQL database needs to retrieve product catalog and pricing information
that is hosted on the internet by a third-party provider A solutions architect must devise a
strategy that maximizes security without increasing operational overhead
What should the solutions architect do to meet these requirements?
A. Deploy a NAT instance in the VPC Route all the internet-based traffic through the NAT
instance
B. Deploy a NAT gateway in the public subnets. Modify the private subnet route table to
direct all internet-bound traffic to the NAT gateway.
C. Configure an internet gateway and attach it to the VPC Modify the private subnet route
table to direct internet-bound traffic to the internet gateway
D. Configure a virtual private gateway and attach it to the VPC Modify the private subnet
route table to direct internet-bound traffic to the virtual private gateway.
ANSWER : B
Question 4
A company is using AWS Key Management Service (AWS KMS) customer master keys
(CMKs) to encrypt AWS Lambda environment variables A solutions architect needs to
ensure that the required permissions are in place to decrypt and use the environment
variables.
Which steps must the solutions architect take to implement the correct permissions?
(Select TWO.)
A. Add AWS KMS permissions in the Lambda resource policy
B. Add AWS KMS permissions in the Lambda execution role
C. Add AWS KMS permissions in the Lambda function policy.
D. Allow the Lambda execution role in the AWS KMS key policy
E. Allow the Lambda resource policy in the AWS KMS key policy.
ANSWER : B,C
Question 5
An administrator of a large company wants to monitor for and prevent any cryptocurrencyrelated attacks on the company's AWS accounts Which AWS service can the administrator
use to protect the company against attacks?
A. Amazon Cognito
B. Amazon GuardDuty
C. Amazon Inspector
D. Amazon Macie
ANSWER : B
