BONUS!!! Download part of TestPassKing AWS-Solutions-Associate dumps for free: https://drive.google.com/open?id=1MhCL3c7mOfnJd9HJ0uSpcuR4mIjv010j

Firstly, our company always feedbacks our candidates with highly-qualified AWS-Solutions-Associate study guide and technical excellence and continuously developing the most professional exam materials. Secondly, our AWS-Solutions-Associate study materials persist in creating a modern service oriented system and strive for providing more preferential activities for your convenience. Last but not least, we have free demos for your reference, as in the following, you can download which AWS-Solutions-Associate Exam Materials demo you like and make a choice. Therefore, you will love our AWS-Solutions-Associate study materials!

The AWS-Solutions-Associate certification is valid for two years, after which candidates must recertify to maintain their credentials. Recertification can be achieved by passing the latest version of the AWS-Solutions-Associate exam or by achieving a higher-level certification, such as the AWS Certified Solutions Architect - Professional.

>> Latest AWS-Solutions-Associate Test Blueprint <<

Free AWS-Solutions-Associate Brain Dumps, Pdf AWS-Solutions-Associate Format

Moreover, you do not need an active internet connection to utilize TestPassKing desktop Amazon AWS-Solutions-Associate practice exam software. It works without the internet after software installation on Windows computers. The TestPassKing web-based Amazon AWS-Solutions-Associate Practice Test requires an active internet and it is compatible with all operating systems.

Amazon AWS Certified Solutions Architect - Associate (SAA-C02) Sample Questions (Q228-Q233):

NEW QUESTION # 228
A company has a web server running on an Amazon EC2 instance in a public subnet with an Elastic IP address. The default security group is assigned to the EC2 instance. The default network ACL has been modified to block all traffic. A solutions architect needs to make the web server accessible from everywhere on port 443.
Which combination of steps will accomplish this task? (Choose two.)

  • A. Create a security group with a rule to allow TCP port 443 to destination 0.0.0.0/0.
  • B. Create a security group with a rule to allow TCP port 443 from source 0.0.0.0/0.
  • C. Update the network ACL to allow inbound/outbound TCP port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0.
  • D. Update the network ACL to allow TCP port 443 from source 0.0.0.0/0.
  • E. Update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 and outbound TCP port
    32768-65535 to destination 0.0.0.0/0.

Answer: B,D

Explanation:
Explanation
The combination of steps that will accomplish the task of making the web server accessible from everywhere on port 443 is to create a security group with a rule to allow TCP port 443 from source 0.0.0.0/0 (A) and to update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 (C). This will ensure that traffic to port 443 is allowed both at the security group level and at the network ACL level, which will make the web server accessible from everywhere on port 443.


NEW QUESTION # 229
A Solutions Architect is creating an application running in an Amazon VPC that needs to access AWS Systems Manager Parameter Store. Network security rules prohibit any route table entry with a 0.0.0.0/0 destination.
What infrastructure addition will allow access to the AWS service while meeting the requirements?

  • A. VPC peering
  • B. AWS PrivateLink
  • C. NAT gateway
  • D. NAT instance

Answer: B

Explanation:
Explanation
https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html


NEW QUESTION # 230
A benefits enrollment company is hosting a 3-tier web application running in a VPC on AWS which includes a NAT (Network Address Translation) instance in the public Web tier. There is enough provisioned capacity for the expected workload tor the new fiscal year benefit enrollment period plus some extra overhead Enrollment proceeds nicely for two days and then the web tier becomes unresponsive, upon investigation using CloudWatch and other monitoring tools it is discovered that there is an extremely large and unanticipated amount of inbound traffic coming from a set of 15 specific IP addresses over port 80 from a country where the benefits company has no customers. The web tier instances are so overloaded that benefit enrollment administrators cannot even SSH into them. Which activity would be useful in defending against this attack?

  • A. Change the EIP (Elastic IP Address) of the NAT instance in the web tier subnet and update the Main Route Table with the new EIP
  • B. Create an inbound NACL (Network Access control list) associated with the web tier subnet with deny rules to block the attacking IP addresses
  • C. Create 15 Security Group rules to block the attacking IP addresses over port 80
  • D. Create a custom route table associated with the web tier and block the attacking IP addresses from the IGW (Internet Gateway)

Answer: B

Explanation:
Use AWS Identity and Access Management (lAM) to control who in your organization has permission to create and manage security groups and network ACLs (NACL). Isolate the responsibilities and roles for better defense. For example, you can give only your network administrators or security ad min the permission to manage the security groups and restrict other roles.


NEW QUESTION # 231
A company has multiple AWS accounts that use consolidated billing. The company runs several active high performance Amazon RDS for Oracle On-Demand DB instances for 90 days. The company's finance team has access to AWS Trusted Advisor in the consolidated billing account and all other AWS accounts.
The finance team needs to use the appropriate AWS account to access the Trusted Advisor check recommendations for RDS. The finance team must review the appropriate Trusted Advisor check to reduce RDS costs.
Which combination of steps should the finance team take to meet these requirements? (Select TWO.)

  • A. Review the Trusted Advisor check for Amazon Redshift Reserved Node Optimization.
  • B. Review the Trusted Advisor check for Amazon RDS Reserved Instance Optimization.
  • C. Review the Trusted Advisor check for Amazon RDS Idle DB Instances.
  • D. Use the Trusted Advisor recommendations from the account where the RDS instances are running.
  • E. Use the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time.

Answer: B,E

Explanation:
Explanation
Use the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time.
The consolidated billing account has access to all the other AWS accounts that use consolidated billing. Using the Trusted Advisor recommendations from the consolidated billing account will allow the finance team to see all RDS instance checks for all accounts at the same time.
Review the Trusted Advisor check for Amazon RDS Reserved Instance Optimization.
The Trusted Advisor check for Amazon RDS Reserved Instance Optimization provides recommendations for purchasing reserved instances to reduce RDS costs. By reviewing this check, the finance team can identify which RDS instances can be converted to reserved instances to save costs.


NEW QUESTION # 232
A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3 These files are encrypted using AWS Key Management Service Customer Master Keys (AWS KMS CMKs) A solutions architect needs to design a solution that will ensure the required permissions are set correctly.
Which combination of actions accomplish this? (Select TWO.)

  • A. Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function
  • B. Grant the decrypt permission for the Lambda IAM role in the KMS key's policy
  • C. Create a new IAM role with the kms decrypt permission and attach the execution role to the Lambda function.
  • D. Attach the kms.decrypt permission to the Lambda function's resource policy.
  • E. Grant the decrypt permission for the Lambda resource policy in the KMS key's policy.

Answer: B,C


NEW QUESTION # 233
......

Our desktop software also tracks your progress, and identifies your strengths and weaknesses, to ensure you're getting the best possible experience for the AWS-Solutions-Associate exam. All features of the web-based version are available in the desktop software. But the desktop software works offline and only on Windows computers.

Free AWS-Solutions-Associate Brain Dumps: https://www.testpassking.com/AWS-Solutions-Associate-exam-testking-pass.html

DOWNLOAD the newest TestPassKing AWS-Solutions-Associate PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1MhCL3c7mOfnJd9HJ0uSpcuR4mIjv010j

ExolTechUSexo_615aa5af3c2878f959402ab7e03e1380.jpg