Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 182 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 182
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company uses an Amazon S3 bucket to store static images for its website. The company configured permissions to allow access to Amazon S3 objects by privileged users only.
What should a solutions architect do to protect against data loss? (Choose two.)

A. Enable versioning on the S3 bucket.
B. Enable access logging on the S3 bucket.
C. Enable server-side encryption on the S3 bucket.
D. Configure an S3 lifecycle rule to transition objects to Amazon S3 Glacier.
E. Use MFA Delete to require multi-factor authentication to delete an object.

Show Suggested Answer

Suggested Answer: AE 🗳️

by AjNapa at Aug. 9, 2020, 3:56 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AjNapa

Highly Voted 3 years, 8 months ago

Answer : A & E

upvoted 64 times

kumar123f

3 years, 8 months ago

How come its A & E ?

upvoted 3 times

AjNapa

3 years, 8 months ago

The objective here is to protect against data loss. And you can do that by enabling versioning and MFA on delete operation

upvoted 12 times

...

Paitan

Highly Voted 3 years, 8 months ago

A and E.

upvoted 12 times

...

momedkri117

Most Recent 3 years, 4 months ago

Selected Answer: AE

such a tricky question, be carful and read the whole question before u answer !

upvoted 4 times

...

woke

3 years, 7 months ago

A and E is correct

upvoted 3 times

...

MDNowfal

3 years, 7 months ago

A and E are correct answers

upvoted 2 times

...

syu31svc

3 years, 7 months ago

It can only be A and E

upvoted 1 times

...

KK_uniq

3 years, 7 months ago

AE for sure. Versioning always for protecting deletes

upvoted 1 times

...

AwsNewPeople

3 years, 7 months ago

A&E are correct one

upvoted 1 times

...

Sun927

3 years, 7 months ago

AE are correct answers

upvoted 1 times

...

elvancedonzy

3 years, 7 months ago

A company is building an application on Amazon EC2 instances that generates temporary transactional data. The application requires access to data storage that can provide configurable and consistent IOPS. What should a solutions architect recommend? A. Provision an EC2 instance with a Throughput Optimized HDD (st1) root volume and a Cold HDD (sc1) data volume. B. Provision an EC2 instance with a Throughput Optimized HDD (st1) volume that will serve as the root and data volume. C. Provision an EC2 instance with a General Purpose SSD (gp2) root volume and Provisioned IOPS SSD (io1) data volume. D. Provision an EC2 instance with a General Purpose SSD (gp2) root volume. Configure the application to store its data in an Amazon S3 bucket

upvoted 1 times

DrCloud

3 years, 7 months ago

Ans: C 1. gp2: root volume 2. io1: To provide configurable and consistent IOPs. ~ Option (A) and (B): st1 is not suitable for root volume. Eliminate. https://aws.amazon.com/ebs/volume-types/

upvoted 2 times

elvancedonzy

3 years, 7 months ago

The application requires access to data storage that can provide configurable Answer is D

upvoted 1 times

...

elvancedonzy

3 years, 7 months ago

A software vendor is deploying a new software-as-a-service (SaaS) solution that will be utilized by many AWS users. The service is hosted in a VPC behind a Network Load Balancer. The software vendor wants to provide access to this service to users with the least amount of administrative overhead and without exposing the service to the public internet. What should a solutions architect do to accomplish this goal? A. Create a peering VPC connection from each user’s VPC to the software vendor’s VPC. B. Deploy a transit VPC in the software vendor’s AWS account. Create a VPN connection with each user account. C. Connect the service in the VPC with an AWS Private Link endpoint. Have users subscribe to the endpoint. D. Deploy a transit VPC in the software vendor’s AWS account. Create an AWS Direct Connect connection with each user account.

upvoted 1 times

DrCloud

3 years, 7 months ago

Ans: C https://aws.amazon.com/privatelink/ 1. AWS PrivateLink provides private connectivity between VPCs and services hosted on AWS or on-premises, securely on the Amazon network. 2. By providing a private endpoint to access your services, AWS PrivateLink ensures your traffic is not exposed to the public internet. 3. AWS PrivateLink makes it easy to connect services across different accounts and VPCs to significantly simplify your network architecture. Options A, B, D: Lot of administrative overhead involved (i.e., VPC peering, Transit VPC, Direct Connect, VPN connection)

upvoted 2 times

...

elvancedonzy

3 years, 7 months ago

A company’s website hosted on Amazon EC2 instances processes classified data stored in Amazon S3. Due to security concerns, the company requires a private and secure connection between its EC2 resources and Amazon S3. Which solution meets these requirements? A. Set up S3 bucket policies to allow access from a VPC endpoint. B. Set up an IAM policy to grant read-write access to the S3 bucket. C. Set up a NAT gateway to access resources outside the private subnet. D. Set up an access key ID and a secret access key to access the S3 bucket.

upvoted 1 times

DrCloud

3 years, 7 months ago

Ans: A https://aws.amazon.com/blogs/aws/new-vpc-endpoint-for-amazon-s3/ https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-s3.html

upvoted 3 times

...

elvancedonzy

3 years, 7 months ago

A company has an application that is hosted on Amazon EC2 instances in two private subnets. A solutions architect must make the application available on the public internet with the least amount of administrative effort. What should the solutions architect recommend? A. Create a load balancer and associate two public subnets from the same Availability Zones as the private instances. Add the private instances to the load balancer. B. Create a load balancer and associate two private subnets from the same Availability Zones as the private instances. Add the private instances to the load balancer. C. Create an Amazon Machine Image (AMI) of the instances in the private subnet and restore in the public subnet. Create a load balancer and associate two public subnets from the same Availability Zones as the public instances. D. Create an Amazon Machine Image (AMI) of the instances in the private subnet and restore in the public subnet. Create a load balancer and associate two private subnets from the same Availability Zones as the public instances.

upvoted 1 times

Meng_Hao

3 years, 7 months ago

I think it's C. We can recreate an instance using AMI, and since the application is completely set up in instances in private subnet you can take the AMI and build them on public subnet. Create a ELB for managing traffic.

upvoted 1 times

...

gargaditya

3 years, 6 months ago

Its A for above question. Exposing private subnets requires that a public subnet be created in the same AZ as private subnet. The public facing LB must be associated with the Public subnet,not private. https://aws.amazon.com/premiumsupport/knowledge-center/public-load-balancer-private-ec2/

upvoted 1 times

...